The council has a responsibility to ensure that all confidential waste is managed and disposed of appropriately, in line with its Retention Schedules and Records Management Plan, to maintain compliance with data protection and regulatory requirements, including the Public Records (Scotland) Act 2011, UK GDPR, and the Data Protection Act 2018. To support this obligation, the Council has historically maintained contractual arrangements to facilitate the secure disposal of confidential waste across the organisation. This requirement also aligns with wider industry expectations and recognised standards, including relevant ISO certifications, established security protocols, and best practice in records management. The materials disposed of through these processes may include personal data as well as commercially sensitive information, all of which require robust safeguards throughout the disposal lifecycle.