There’s a conversation happening in boardrooms, hospital IT departments, and sustainability offices around the world that almost never makes it into the public discourse around circular economy progress. Everyone talks about e-waste. Everyone talks about the environmental cost of discarded electronics. Documentaries show mountains of old computers and phones being dismantled by hand in Ghana and India. Policy papers call for more reuse, more refurbishment, more circularity. And yet, the pace at which businesses and hospitals actually move their used electronic equipment back into circulation remains frustratingly, stubbornly slow.
Why? If you ask the average sustainability professional, they’ll talk about logistics. They’ll mention procurement cycles and asset management complexity. They might bring up the cost of refurbishment or the challenge of finding reliable downstream partners. All of that is real. But underneath all of it, quieter and more stubborn than any of those practical challenges, sits one issue that stops more devices from re-entering the circular economy than almost any other single factor.
Data privacy.
Specifically, the terror — and it’s not too strong a word — of improperly erased personal information leaving an organization on a used device and ending up somewhere it absolutely should not be. This fear is rational, legally well-founded, and in many cases, entirely paralyzing. Understanding why requires us to go deep into the intersection of data protection law, organizational risk management, hospital compliance obligations, and the practical realities of electronic data erasure. So let’s do exactly that.
The Circular Economy Promise and the Electronic Equipment Gap
The circular economy, as a concept, is genuinely elegant. Instead of the traditional linear model — extract resources, make products, use them, throw them away — the circular model keeps products and materials in use for as long as possible. For electronics, this means refurbishing laptops and reselling them, donating functional tablets to schools, passing working servers to nonprofits, or at minimum, ensuring that components are harvested and recycled responsibly.
The potential environmental gains are enormous. The manufacturing of a single laptop generates roughly 300 to 400 kilograms of carbon dioxide equivalent emissions. Extending that laptop’s life by even two or three years through refurbishment and resale dramatically reduces the need for new manufacturing. Multiply this across the millions of devices that businesses and hospitals retire every year, and you’re talking about a genuinely significant climate intervention.
And yet, study after study on corporate electronics disposition finds that large organizations — particularly those handling sensitive data — overwhelmingly choose physical destruction of devices over resale or donation. Shredding. Degaussing. Crushing. Methods that guarantee no data survives, but that also guarantee no device survives to be reused. The circular economy loses millions of potentially functional devices to the shredder every single year, and data privacy anxiety is a primary reason why.
What Organizations Are Actually Afraid Of
To understand the barrier, you have to understand what organizations are genuinely scared of when it comes to used electronics. It’s not abstract anxiety — it’s specific, legally concrete, financially quantifiable fear.
When a hospital retires a fleet of tablets used by nursing staff, those devices may contain patient health records, medication logs, diagnostic images, appointment histories, and clinical notes. When a financial services firm retires its trading floor workstations, those machines may contain transaction records, client account information, proprietary trading algorithms, and employee personal data. When a law firm retires its associates’ laptops, those devices may contain privileged attorney-client communications, case files, and confidential settlement agreements.
If any of this information survives on a device that ends up in the wrong hands — whether through resale to an unscrupulous buyer, donation to an organization that lacks secure disposal protocols, or loss somewhere in a long and poorly documented supply chain — the consequences can be catastrophic. We’re not talking about mild regulatory criticism. We’re talking about multimillion-dollar fines, criminal referrals, class action lawsuits, and reputational damage that can take years to recover from.
This is not paranoia. It is a rational assessment of a real risk environment shaped by some of the strictest and most aggressively enforced data protection regulations ever written.
HIPAA and the Hospital’s Impossible Position
Let’s spend real time with hospitals and healthcare organizations, because their situation is perhaps the most acute illustration of why data privacy freezes circular economy participation.
The Health Insurance Portability and Accountability Act — HIPAA — imposes strict requirements on how healthcare organizations handle Protected Health Information, or PHI. PHI is defined broadly to include any individually identifiable health information held or transmitted in any form — including electronically. An electronic medical record is PHI. A patient’s name linked to an appointment date is PHI. A prescription record is PHI. A diagnostic image stored on a tablet is PHI.
HIPAA’s Security Rule requires covered entities — hospitals, clinics, health insurers, and their business associates — to implement technical safeguards to ensure the confidentiality, integrity, and availability of electronic PHI. When a device containing ePHI is retired, the organization must ensure that all PHI is rendered unreadable, unrecoverable, and indecipherable before the device leaves organizational control.
The Office for Civil Rights, which enforces HIPAA, has levied substantial fines for PHI breaches involving improperly disposed devices. Anchorage Community Mental Health Services paid $150,000 for failures including inadequate attention to device security. A major university health system paid $4.8 million — the largest HIPAA settlement in history at the time — partly related to inadequate controls on portable devices.
Now put yourself in the position of a hospital CIO responsible for retiring 5,000 tablets used by nursing staff across a large hospital system. You could engage a certified refurbisher and resell those tablets, generating revenue and keeping functional devices in the circular economy. But doing so requires you to prove — not just believe, but prove with documented evidence that will hold up to a federal investigation — that every single device has been completely and verifiably cleared of all PHI. If even one device slips through with recoverable patient data, you may be looking at a breach notification obligation, a regulatory investigation, and potentially enormous financial penalties. The risk-reward calculation, from where you’re sitting, looks terrifying.
GDPR: The European Standard That Raised the Global Bar
The General Data Protection Regulation, which came into force in the European Union in May 2018, fundamentally changed the global landscape of data privacy compliance and dramatically intensified the anxiety around device disposition.
GDPR establishes the right to erasure — the so-called “right to be forgotten” — as a foundational data subject right. It requires that personal data be stored only as long as necessary for the purpose for which it was collected. It mandates that data processors implement appropriate technical and organizational measures to protect personal data. And it imposes fines for violations that can reach 4% of global annual turnover or €20 million, whichever is higher.
For a multinational corporation operating in Europe, the implications for device disposition are profound. Every laptop, workstation, phone, and tablet that has processed personal data of EU residents is a potential GDPR compliance issue when it comes time to retire the device. The organization must demonstrate that personal data has been completely erased — not just deleted in the conventional sense, but genuinely rendered unrecoverable — before the device leaves organizational control.
The “deleted” distinction matters enormously here, and it’s worth pausing on. When most people delete a file, they don’t actually erase the data. They simply remove the file’s reference in the operating system’s index, making the space available to be overwritten. The underlying data remains on the drive, fully readable by anyone with basic data recovery software, until it happens to be overwritten by new data. This is not GDPR-compliant erasure. This is not HIPAA-compliant sanitization. This is not compliant with virtually any serious data protection framework.
The Technical Reality of Data Erasure: Harder Than It Sounds
And here we get into one of the most genuinely underappreciated technical challenges in the entire circular economy space. Proper data erasure — the kind that actually meets regulatory standards — is significantly more complicated than most non-technical people realize. And this technical complexity creates organizational friction that translates directly into circular economy participation rates.
For traditional spinning hard drives, proper data sanitization typically involves either degaussing — exposing the drive to a powerful magnetic field that disrupts the magnetic domains storing data — or overwriting the entire drive multiple times with random data patterns, following standards like the NIST 800-88 guidelines. Both methods work, but both require proper equipment, trained personnel, documented procedures, and verifiable audit trails.
Solid-state drives — SSDs, which are now standard in most modern laptops and many organizational devices — present a different and in some ways more complicated challenge. The way SSDs manage data, through wear-leveling algorithms and overprovisioned storage areas, means that standard overwrite methods may not fully erase all data on the drive. NIST 800-88 specifically notes that SSDs require different sanitization approaches, typically either cryptographic erasure — destroying the encryption key that protects encrypted data — or physical destruction of the NAND flash chips.
Mobile devices — smartphones and tablets — add another layer of complexity. Operating system encryption, manufacturer-specific secure enclave chips, and the way mobile operating systems manage storage all create nuances in the erasure process. A factory reset, which many organizations assume is sufficient, is often not cryptographically complete and may leave recoverable data on the device.
The Certification Problem: Who Do You Trust?
Even when an organization decides to engage a third-party IT asset disposition provider — known as an ITAD provider — to handle device sanitization and resale, it faces a significant trust and verification challenge that further inhibits circular economy participation.
The ITAD industry includes genuinely excellent, certified, highly professional operators who follow rigorous data sanitization standards, provide detailed audit reports, and carry appropriate insurance and certifications. R2 (Responsible Recycling) and e-Stewards are the two primary certification standards for electronics recyclers and refurbishers, and certified providers under these standards are subject to regular audits and must adhere to documented data sanitization protocols.
But the ITAD industry also includes less scrupulous operators — companies that overpromise data security guarantees, cut corners on sanitization procedures, and may not have the technical expertise or infrastructure to properly handle the devices they’re claiming to sanitize. For an organization with significant data sensitivity, distinguishing between a genuinely trustworthy ITAD partner and one that merely presents trustworthy-looking marketing materials requires due diligence that many organizations lack the time, expertise, or resources to conduct thoroughly.
This creates a market with two problematic attractors. Organizations with the highest data sensitivity — hospitals, financial institutions, law firms, government agencies — often conclude that no external partner can be trusted sufficiently and opt for in-house physical destruction instead. This is the safest possible decision from a pure liability standpoint, but it removes millions of potentially reusable devices from the circular economy. Organizations with lower diligence standards may use inadequately vetted ITAD partners, which creates the very data breaches that justify the fears of more cautious organizations.
The Documentation and Audit Trail Requirement
Let’s talk about something that sounds bureaucratic but is actually central to the entire problem: documentation. Regulatory compliance in data protection isn’t just about doing the right thing — it’s about being able to prove you did the right thing, to a regulator, in an investigation, potentially years after the fact.
When an organization disposes of a device, it needs to be able to produce a complete chain of custody — documenting who had the device, when it left organizational control, what sanitization method was applied, who applied it, what verification was performed, and where the device went afterward. For a hospital retiring 5,000 devices, this documentation requirement is operationally enormous.
NIST 800-88 provides specific guidance on sanitization and documentation requirements for federal agencies, and these standards have become de facto benchmarks in many private sector compliance frameworks as well. Meeting them requires not just technical competence but systematic, well-resourced asset management processes that many organizations simply don’t have.
The irony here is painful. The organizations with the largest device fleets — large hospital systems, major financial institutions, big-box retailers with thousands of point-of-sale terminals — are also the organizations with the most complex data environments, the most stringent regulatory obligations, and therefore the highest barriers to circular economy participation. The scale of potential contribution to the circular economy is inversely correlated with the ease of participation.
When Good Intentions Meet Legal Reality: The Donation Dilemma
The donation pathway is perhaps the most emotionally compelling aspect of this problem, because it sits at the intersection of corporate goodwill, educational need, and digital equity. There are schools without adequate computing resources. There are libraries serving communities without home internet access. There are nonprofits doing critical social work with inadequate technology. And sitting in corporate storerooms and hospital IT closets are thousands of perfectly functional laptops and tablets that could serve these communities well.
But the data privacy barrier doesn’t care about good intentions. A donated laptop containing recoverable personal data is a data breach regardless of whether it was donated to a school or sold to a refurbisher. The legal exposure is identical. The regulatory scrutiny would be identical. The reputational harm would be identical.
This creates a situation where organizations that genuinely want to donate devices face the same liability calculation as those seeking to profit from resale. Many conclude that the safe path is destruction, even when they’re aware that functional devices are being unnecessarily eliminated and that communities they care about could benefit from those devices.
Some progressive organizations have found solutions — partnering with certified ITAD providers who specialize in both data sanitization and device donation coordination, using cryptographic erasure methods that can be documented and verified, or working with nonprofits that have their own certified data sanitization capabilities. But these solutions require organizational knowledge, administrative capacity, and willingness to invest in doing the process correctly that many organizations simply haven’t developed.
The Insurance and Indemnification Puzzle
Here’s a dimension of the problem that rarely gets discussed in sustainability conversations: the role of insurance in perpetuating device destruction over resale. Cyber liability insurance — which most large organizations now carry — typically covers costs associated with data breaches, including notification costs, regulatory fines, and legal defense. But insurers are increasingly scrutinizing how organizations manage device disposition as part of their underwriting assessments.
An organization that can demonstrate a rigorous, documented, certified device sanitization program may be viewed more favorably by insurers than one that lacks clear protocols. But here’s the uncomfortable reality: for many risk managers and insurance professionals, physical destruction of devices is the easiest way to definitively eliminate the risk of a device-related data breach. It’s simple, verifiable, and leaves no ambiguity. A shredded hard drive cannot leak data. A refurbished laptop that was improperly sanitized can.
When risk managers are evaluating device disposition policies, they’re often working within insurance frameworks that effectively reward the most conservative approach — destruction — over the more environmentally responsible but harder-to-verify approach of certified sanitization and resale. Until insurance frameworks evolve to appropriately value certified sanitization programs, the financial incentives will continue to push organizations toward destruction.
Small and Medium Businesses: Flying Without Instruments
If the situation for large organizations is complicated, the situation for small and medium-sized businesses is arguably worse, for the opposite reason. Large organizations often have the challenge of excessive caution — they know enough about data privacy law to be scared, but sometimes lack the operational maturity to implement certified sanitization programs and therefore default to destruction. Small and medium businesses often have the challenge of insufficient awareness — they may not fully understand their data protection obligations, may assume that a basic factory reset is adequate, and may resell or donate devices that still contain recoverable personal data.
This is how data breaches involving used equipment actually happen in practice. Not usually through the device retirement programs of major hospitals or Fortune 500 companies — these organizations are, if anything, over-cautious. They happen through the informal device disposition practices of small businesses, dental practices, accounting firms, and independent retailers who don’t have dedicated IT staff, may not have formal data handling policies, and may genuinely believe that deleting files and resetting a device to factory settings has rendered it safe for resale or donation.
The result is a two-tiered problem. Large organizations contribute to the circular economy deficit through excessive caution. Small organizations contribute through insufficient caution. The middle ground — participating in the circular economy through certified, documented, compliant sanitization — is occupied by too few actors in either category.
The Environmental Cost We’re Actually Paying
Let’s make this concrete, because the environmental stakes deserve to be stated clearly and specifically. The United Nations Global E-waste Monitor estimated that the world generated 62 million metric tonnes of electronic waste in 2022 — a figure that has grown consistently and is projected to continue rising. Of this, only about 22% was formally collected and recycled through certified channels.
A substantial portion of the devices contributing to this waste stream are business and institutional devices retired by organizations that chose physical destruction over resale or donation. Every destroyed laptop that could have served another three to five years of useful life represents the environmental cost of its manufacturing being fully externalized, with no offsetting benefit from extended use. The rare earth minerals in its components, the carbon emitted in its production, the water used in its manufacturing — all of that becomes pure environmental debt with no return.
If the data privacy barrier could be systematically addressed — if organizations had clear, affordable, verifiable pathways to compliant device sanitization — the potential circular economy contribution would be enormous. Studies have suggested that extending the average life of commercial laptops by even 18 months would reduce their per-unit lifetime carbon footprint significantly. Across the millions of devices retired by businesses and hospitals annually, this represents a meaningful climate intervention hiding behind a compliance problem.
What Regulatory Clarity Could Actually Unlock
One of the most important interventions that could reduce the data privacy barrier is regulatory clarity on what constitutes acceptable sanitization for circular economy purposes. Currently, data protection regulations like GDPR and HIPAA specify outcomes — data must be rendered unrecoverable — but don’t always provide specific technical guidance on which sanitization methods definitively meet the standard.
This ambiguity is costly. When organizations face uncertainty about whether a particular sanitization method will satisfy a regulator’s requirements in the event of a breach investigation, the rational response is to choose the method that eliminates all ambiguity — physical destruction. Clear regulatory guidance that explicitly endorses specific certified sanitization methods as compliant with data protection obligations would give organizations the certainty they need to choose refurbishment over destruction.
The NIST 800-88 standard moves in this direction for U.S. federal agencies, and several European data protection authorities have issued guidance on device sanitization. But a comprehensive, globally consistent framework for certified data sanitization that explicitly enables circular economy participation would be transformative. It would shift the default risk calculation from “destruction is safe, sanitization is uncertain” to “certified sanitization is explicitly compliant and legally defensible.”
Innovation in Data Erasure Technology
The technology landscape for data erasure is evolving, and several developments hold genuine promise for reducing the practical barriers to circular economy participation. Software-based data erasure tools have become more sophisticated, with products like Blancco, Ontrack Eraser, and similar solutions offering certified erasure processes that generate detailed, auditable reports documenting the sanitization of each device. These reports can serve as the audit trail documentation that compliance frameworks require.
Hardware-level encryption, which is now standard on most modern business devices, creates an important opportunity for cryptographic erasure — a method endorsed by NIST 800-88 in which the encryption key protecting device data is destroyed, rendering all data permanently unreadable without actually overwriting every storage location. For devices that were encrypted from the start, cryptographic key destruction is fast, complete, and highly verifiable. As encryption becomes universal in enterprise device deployments, this method becomes increasingly broadly applicable.
Some device manufacturers are also building sanitization capabilities directly into their products, with certified factory reset processes that meet or exceed regulatory standards and generate verifiable documentation. Apple’s Activation Lock and Erase All Content processes, for example, have been updated to incorporate stronger cryptographic erasure guarantees. Similar developments from enterprise device manufacturers could significantly simplify compliant sanitization at scale.
The Role of ITAD Certification in Building Trust
The IT asset disposition industry’s certification frameworks — particularly R2 and e-Stewards — represent an important part of the solution architecture, but they need to be better understood and more widely adopted by organizations disposing of devices. These certifications require audited compliance with documented data sanitization standards, chain of custody requirements, and downstream tracking of devices and materials.
An organization that partners with a certified ITAD provider and requires documentation of R2 or e-Stewards compliance has taken a defensible, auditable step toward compliant device disposition that enables circular economy participation. The challenge is that many organizations — particularly smaller ones — aren’t aware of these certification frameworks, don’t know how to verify them, or don’t include them in their vendor selection criteria for device disposition contracts.
Building broader organizational awareness of ITAD certification standards, and potentially incorporating them into regulatory guidance as approved sanitization pathways, would help bridge the gap between the availability of compliant refurbishment options and organizations’ willingness to use them.
Hospitals Leading the Way: When Compliance Meets Commitment
It would be unfair and inaccurate to suggest that every hospital and large organization defaults to destruction. Some healthcare systems have developed genuinely innovative approaches to compliant device resale and donation that demonstrate what’s possible when compliance expertise and sustainability commitment work together.
The Veterans Health Administration — one of the largest healthcare systems in the world — has developed documented protocols for device sanitization and disposition that meet federal data protection requirements while enabling meaningful device reuse. Several large health systems have partnered with ITAD providers holding both R2 certification and HIPAA business associate agreements, creating a compliant pathway for device resale and donation that has been validated by legal and compliance teams.
These programs demonstrate that the data privacy barrier, while real and significant, is not insurmountable. It requires investment in proper processes, informed partnerships, and organizational will to move beyond the default of destruction. The organizations that have made this investment serve as proof of concept for what the broader market could achieve if the barrier were more systematically addressed.
Designing for Circularity From the Start: The Hardware Manufacturer’s Role
There’s an upstream intervention point that deserves attention: the design of electronic devices themselves. If enterprise devices were designed from the outset with secure, certified, factory-level sanitization capabilities built in — capabilities that generate verifiable erasure documentation and that are guaranteed to meet global data protection standards — the burden on individual organizations would be dramatically reduced.
Several enterprise device manufacturers are moving in this direction, recognizing that organizations increasingly ask about end-of-life data security as part of procurement decisions. Devices that can be cryptographically erased with a single certified command, generating a tamper-evident audit log, would remove much of the technical uncertainty that drives organizations toward physical destruction. This is a design-for-circularity intervention that sits upstream of the disposal decision and could have significant downstream impact on circular economy participation rates.
Policy Recommendations That Could Move the Needle
Addressing the data privacy barrier to circular economy participation requires coordinated action across multiple levels. Regulatory bodies could explicitly recognize certified sanitization methods as compliant with data protection obligations, removing legal ambiguity that currently drives organizations toward destruction. Industry standards bodies could develop clearer, more accessible guidance for non-technical organizational decision-makers on what constitutes adequate sanitization for different device types and data sensitivity levels.
Procurement policy could also play a role. Government procurement frameworks — which already in some jurisdictions require consideration of environmental factors in purchasing decisions — could be extended to require consideration of end-of-life data security and circularity planning as part of device procurement. Requiring that procured devices include certified end-of-life sanitization capabilities would build circularity into the procurement cycle rather than treating it as an afterthought.
Extended producer responsibility schemes — which require manufacturers to take back and manage end-of-life devices — could incorporate data security certification requirements, ensuring that manufacturer take-back programs meet data protection standards and can legitimately feed devices into refurbishment and reuse channels.
Conclusion
Data privacy around erased personal information is not merely a technical nuisance in the circular economy conversation. It is a structural barrier — legally grounded, financially rational, and organizationally reinforced — that prevents enormous quantities of functional electronic equipment from re-entering circulation every single year. The fear is not irrational. The regulations driving it are real, aggressively enforced, and carry financial consequences severe enough to justify extreme caution in any rational risk management framework.
But the barrier, while real, is not immovable. It can be addressed through clearer regulatory guidance that explicitly endorses certified sanitization as compliant; through broader adoption of ITAD certification standards that create verifiable, auditable sanitization pathways; through device design that incorporates factory-level certified erasure capabilities; and through organizational investment in proper data sanitization programs that enable rather than prevent circular economy participation.
The environmental stakes of getting this right are enormous. Every device shredded unnecessarily because its organization lacked a compliant sanitization pathway is a small environmental tragedy multiplied millions of times across the global economy. Building the compliance infrastructure that makes certified sanitization the rational choice — rather than the risky choice — is one of the most important practical steps available for accelerating circular economy progress in the electronics sector.
Frequently Asked Questions
What is the difference between deleting files and properly erasing data from a device before donation or resale?
Deleting files or performing a standard factory reset does not actually erase data in most cases — it simply removes the operating system’s reference to that data, making the storage space available for future use. The underlying data remains fully readable by anyone with basic data recovery software until it is physically overwritten. Proper data erasure — as required by regulations like GDPR and HIPAA — involves either overwriting all storage locations with random data using certified software that generates an audit report, cryptographic erasure by destroying the encryption key, or physical destruction. Only these methods reliably render data unrecoverable and are defensible in regulatory compliance contexts.
What certifications should an IT asset disposition company hold to be trusted with sensitive organizational data?
The two primary certifications for ITAD providers are R2 (Responsible Recycling) and e-Stewards, both of which require audited compliance with documented data sanitization, chain of custody, and downstream tracking standards. For healthcare data specifically, ITAD providers should hold a HIPAA Business Associate Agreement and be able to demonstrate specific compliance with HIPAA’s data sanitization requirements. For organizations subject to GDPR, ITAD partners should be able to serve as data processors under GDPR and demonstrate compliance with the regulation’s data erasure requirements. Requesting and verifying these certifications — not just accepting self-reported claims — is essential due diligence.
Can hospitals legally donate retired medical devices and tablets to nonprofit organizations or schools?
Yes, hospitals can legally donate retired devices, but only after ensuring complete, verified, documented sanitization of all Protected Health Information from those devices. The donation context does not reduce HIPAA compliance obligations — a donated device containing recoverable PHI is a reportable breach event regardless of the recipient organization’s charitable status. Hospitals seeking to donate devices should work with HIPAA-compliant ITAD partners who can sanitize devices to documented standards and provide audit reports certifying compliance before devices transfer to the recipient organization.
Why do solid-state drives present a more complicated data erasure challenge than traditional hard drives?
Traditional spinning hard drives store data on magnetic platters, and overwriting that data with random patterns — or degaussing the drive — reliably destroys the underlying information. Solid-state drives use NAND flash memory managed by wear-leveling algorithms that distribute writes across storage cells to extend drive life. This means that standard overwrite commands may not reach all storage locations where data has been written, including overprovisioned areas not accessible through the operating system. For SSDs, NIST 800-88 recommends either cryptographic erasure — which requires that the drive was encrypted from the start — or physical destruction of the NAND chips. Some SSD manufacturers also provide certified secure erase commands through firmware that reliably sanitize all storage locations.
What practical steps can a small or medium-sized business take to participate in the circular economy with used electronics while managing data privacy risk?
Small and medium businesses should start by inventorying all devices to be retired and cataloging the types of data each device category may have handled — customer personal data, financial records, employee information, and so on. They should then engage a certified ITAD provider holding R2 or e-Stewards certification and request written documentation — including serial-number-level audit reports — of the sanitization method applied to each device. For devices that handled sensitive data, require that the ITAD provider’s sanitization process meets NIST 800-88 standards and obtain a certificate of data destruction for each device. If budget allows, consulting with a data privacy attorney or compliance specialist to review the organization’s device disposition policy can provide significant peace of mind and ensure the process is documented in a way that would be defensible in the event of a regulatory inquiry.
Richardson Gray is a writer who specializes in legal and compliance basics for solopreneurs, as well as the growing second-hand and circular economy. With 21 years of experience, he has written extensively about business trends, sustainable consumption, and practical strategies for independent entrepreneurs. He holds both a BSc and an MSc in Economics, giving him a strong understanding of business systems, market behavior, and financial practices.
Leave a Reply