Alastair Barter of the Information Commissioner’s Office looks at the principle of security and how it should be applied in the IT asset disposal process