Leesburg Government IT Procurement Guide

Why Leesburg Government Offices Buy IT Differently

If you're a public sector IT manager or purchasing officer for Lake County government or the City of Leesburg, you already know a laptop order isn't just a laptop order. Somebody approves it, tags it, tracks it, and eventually has to account for it in a public inventory.

Then comes the part nobody plans for: what happens when it's finally done. Leesburg sits in Lake County, whose seat is nearby Tavares. Leesburg city departments, Lake County offices, and the Sheriff's Office all retire devices that hold public records and personal data.

Population figures come from the 2020 Census.

STS Electronic Recycling provides secure IT asset disposition with documented chain of custody for Leesburg government agencies. Operating since 2010, STS delivers NAID AAA certified data destruction, serial number certificates of destruction, and downstream material tracking for Lake County organizations, serving Leesburg from our 250,000 sq ft processing operation.

Nothing here replaces advice from your county attorney or your own purchasing code. Think of it as a checklist for the conversation.

Writing Disposal Into the Purchase, Not After It

Most procurement files cover price, warranty, delivery, and support. Almost none say what happens to the device in year five. That gap is where drives end up stacked in a closet until someone cleans out the building.

Add three requirements to your next solicitation

You need three lines in the RFP or purchase terms: who is responsible at end of life, which sanitization standard applies, and what documentation you'll receive. Put them in the contract and they follow the equipment.

Leased, owned, and donated equipment

Ownership changes the rules. A leased copier goes back to the leasing company, and the drive inside goes with it unless your contract says otherwise. Owned equipment is yours to sanitize and dispose of. Donated or transferred equipment needs its own paperwork, because the receiving party takes on whatever data is still inside.

Before you sign a lease, ask what happens to the storage when the term ends.

Decide who owns the decision

In many offices, IT buys the equipment, finance tracks the asset, and records staff worry about the data. Nobody owns the handoff between them. Pick one person to sign off on every retirement, and give that person the authority to stop a pickup if the paperwork isn't ready.

If your agency already has a documented process, ask whether it produces a certificate of destruction for Leesburg government equipment tied to serial numbers. STS engagements with public sector IT typically include chain of custody reporting and serial level certificates of destruction for agency audit files.

What Do Florida Public Records Rules Mean for Retired Devices?

A retired device can still hold public records. Florida's public records law, Chapter 119 of the Florida Statutes, is broad, and records made or received in connection with agency business can be public records in any format, including on a laptop, file server, or copier hard drive.

That cuts two ways. You can't just wipe a device that holds the only copy of a record you're required to keep. And you can't hand off a device that holds confidential information without sanitizing it first.

When a records request touches a retired device

Say someone files a public records request, and the responsive records lived on a laptop you retired last spring. If your process is clean, the records were moved to your system first and the request is easy to answer. If it isn't, you have an awkward conversation ahead. That's the practical case for doing retention checks before sanitization, not after.

Confidential and exempt information

Some information on government devices is confidential or exempt by law, such as certain personal identifiers and records tied to active investigations. The details depend on the record and the statute, so your attorney should define the categories for your agency. What IT can control is treating everything on the device as sensitive until someone with authority says otherwise.

Surplus and inventory rules

Chapter 274 of the Florida Statutes covers tangible personal property owned by local governments, including records and inventory, surplus property, and recorded authority for disposal. Your own purchasing code adds detail on top, so confirm the approvals and paperwork exist before computers leave your inventory.

Think about who handles what. A utility billing workstation or a Tax Collector office laptop carries customer information that the average office PC never sees.

Offices that touch criminal justice information, like a sheriff's office or courthouse system, may also fall under the FBI CJIS Security Policy, which sets its own media sanitization expectations. If that's you, say so in your vendor requirements. For a closer look at agency level recycling, see our page on government electronics recycling in Leesburg and Lake County.

Which Data Sanitization Standard Belongs in Your Bid Language?

Put NIST SP 800-88 Rev. 2 in your bid language. NIST published Rev. 2 in September 2025, its first update since 2014, and it sorts sanitization into three methods: clear, purge, and destroy. Vague phrases like "securely wiped" won't hold up in an audit.

Which method you need depends on how sensitive the data was and where the device is headed. Rev. 2 says to prefer purge over clear when possible, and destroy fits high sensitivity media leaving your control.

Phones and tablets deserve their own line in the policy. Staff often use them for email and messaging that touch public business, and they walk out of the building every day. Put them in your inventory, and require the same sanitization documentation you'd ask for on a laptop.

Ask for detail by media type

Hard drives, solid state drives, phones, and copiers all behave differently, so your bid language should require the vendor to name the method used for each.

STS provides media sanitization aligned with NIST SP 800-88 Rev. 2, with each purge or destruction step verified and recorded, for organizations that follow that guideline. See our data destruction services for Leesburg organizations.

Documentation worth requiring

A good sanitization report names the device, the serial number, the method, the date, and who or what performed it. A summary line like "drives destroyed" gives you nothing to check. Ask for the report format before you award the contract, not after the first pickup.

Devices you can't verify

Some equipment shows up with no known history, like a box of old laptops found in a storage room. Treat anything you can't verify as if it holds sensitive data. Physical destruction is often the simplest answer for those devices, since you don't have to trust a wipe you can't confirm.

What about copiers and printers? Multifunction copiers, printers, and network gear in Leesburg and county offices often keep scanned documents and configuration data long after anyone has looked at them.

How Should You Evaluate a Disposal Vendor Before You Award?

Ask for current certificates with the facility named, serial level reporting, documented chain of custody, and downstream tracking. Price matters, but the cheapest bid isn't always the safest, and this checklist shows what to request before you sign anything.

• A current R2v3 certificate, plus the name of the facility where your equipment will actually be processed
• NAID AAA certification for data destruction, with the scope spelled out
• Serial number level reporting and a certificate of destruction for every pickup
• Documented chain of custody from your loading dock to final processing
• Downstream tracking that shows where recovered materials go
• Insurance, plus references from other public sector customers

Why look closely at the first item? A certificate with a company name on it doesn't tell you which building handles your equipment. Ask which facility, and ask for the paperwork that proves the scope.

Ask for copies of the certificates, not just a statement that they exist. Check the expiration date and the facility address printed on each one. It takes five minutes, and it's the easiest way to catch an outdated claim.

Pickup day questions

Ask how equipment is transported, who handles it, and whether it's sealed or tracked between your site and the processing facility. If you're decommissioning a lot of gear at once, ask how it's counted and reconciled against your inventory list. A mismatch between what you listed and what was received is exactly what an audit flags.

For high sensitivity devices, ask whether destruction can be witnessed or documented in detail.

Downstream matters too

Recovered metals, plastics, and circuit boards go somewhere after processing. A reputable vendor can tell you which downstream partners handle what, and whether they're held to the same standards. R2v3 certification includes requirements for tracking materials downstream, so it's a good question for any vendor.

Where STS fits

STS Electronic Recycling secures data for Leesburg agencies through media sanitization with verified, recorded steps. NAID AAA certified data destruction, ISO 27001, and SOC 2 back the process, and STS includes a serial number certificate of destruction with its services. Ask us for the same documents you'd ask any other vendor.

A Practical Retirement Timeline for Your Department

Here's a rhythm that works for small IT teams without a dedicated asset manager.

Before you buy

Add the disposal requirements to the solicitation, and find out whether the manufacturer or reseller offers take back or trade in. Ask each bidder for a sample sanitization report too. Seeing the format early tells you whether it will satisfy your records staff.

While devices are in service

Keep your asset list current. Record who has each device and whether it holds storage that needs special handling. A list that's a year out of date is almost as bad as no list.

When devices are due out

Check retention, get surplus approval, and choose the sanitization level. Then schedule pickup with enough lead time that equipment isn't piling up in a hallway.

After pickup

File the certificate of destruction with the purchase record. Update your inventory so the device shows as disposed, with the date and method. Public sector IT managers typically expect detailed certificates of destruction for audit reviews, and STS includes them in its service engagements.

Put the cost in the budget

Retirement costs belong in the original budget request. When the line item doesn't exist, devices tend to sit.

Mistakes worth avoiding

A handful of patterns cause most of the trouble.

• Wiping devices before confirming retention requirements
• Letting equipment pile up in storage rooms with no inventory
• Accepting a pickup receipt that lists quantities but not serial numbers
• Leaving copiers and printers off the retirement list
• Assuming the leasing company handles the data on returned equipment

Agencies that want to see how this plays out across federal, state, and local government can read our government electronics recycling and ITAD overview. Wondering where to start? Call 844-699-2913 and we'll talk through your own timeline.