Everyone has a version of this story.
Someone resigns on a Friday. IT sends a return email on Monday. The ex-employee reads it, intends to reply, gets distracted by their new job, and three weeks later the laptop is still on their desk in Rotterdam, along with all the company data on it.
Nobody is being malicious. The process just does not work.
For companies with employees in one city, device retrieval is annoying. For distributed teams with people across multiple countries, it is an operational and security challenge that most companies handle by accident, one resignation at a time.
This guide covers how to actually fix it, the process, the legal requirements, the cross-border specifics, and what the companies getting it right are doing differently.
Why laptop retrieval fails for remote teams
The failure modes are consistent. Device retrievals after offboarding fail for three main reasons: employee device refusal, delivery issues, and communication problems.
None of these are because employees are dishonest. They happen because the process puts all the friction on the person who is least motivated to deal with it, someone who has already mentally left the company.
The specific things that go wrong:
No original packaging. Most employees threw away the laptop box months ago. When IT asks them to "ship it back," they have no idea what to use. They find a box that is roughly the right size, pack it poorly, and the laptop arrives damaged — or does not arrive at all because they gave up on the logistics.
Unclear instructions. "Please return your laptop" is not a process. Which carrier? Which address? Do they pay for shipping? What about customs if they are in a different country? Unanswered questions become ignored emails.
Wrong timing. Most companies initiate retrieval on or after the last day. By then, the employee has handed in their notice, worked out their final weeks thinking about something else, and is actively focused on their new role. The window to catch them while they are still engaged closes at resignation, not departure.
No accountability structure. In most companies, nobody owns device retrieval end to end. IT handles the request, HR handles offboarding communication, and the gap between them is where laptops disappear.
The legal reality — what GDPR requires
For companies operating in Europe, device retrieval is not just an asset management issue. It is a data protection obligation.
Under GDPR, company-issued laptops contain personal data, employee files, communications, customer data, internal documents. When an employee leaves, that data remains the company's responsibility regardless of where the physical device is. An unretrieved laptop sitting in a former employee's home is an uncontrolled data endpoint.
A factory reset is not sufficient. GDPR requires that personal and company data is securely deleted before a device is reissued or disposed of. A standard factory reset does not permanently erase data, it simply removes the index, leaving data recoverable with basic forensic tools. The recognised standard for compliant wiping is NIST 800-88, which involves overwriting data to make recovery impossible. Companies should request a certificate of data destruction for audit purposes.
The timing matters. GDPR does not set a specific deadline for device retrieval, but the principle of data minimisation means companies should act promptly once an employment relationship ends. Leaving a device unrecovered for months creates ongoing exposure that is difficult to justify to a regulator.
What about remote wiping? If your devices are enrolled in an MDM (Mobile Device Management) system like Jamf or Intune, you can initiate a remote wipe as soon as an employee leaves. This is best practice for data security. However, it does not solve the physical retrieval problem, you still need the device back to redeploy, resell, or retire it properly.
Country-specific considerations in Europe
Cross-border retrieval within Europe has quirks that catch teams off guard. Here are the ones that matter most for companies hiring across the EU and UK.
Germany. German employment law is protective of employees, and device return requirements need to be documented clearly in employment contracts. If not addressed contractually, disputes about return obligations can be complicated. Practically: DHL is the dominant carrier, but lithium battery restrictions apply to air freight for laptops, ground shipping is required for cross-border moves within the EU in some cases. Confirm with your carrier before booking.
Netherlands. Generally straightforward for retrieval, the Dutch postal and courier network is reliable and employees tend to comply when the process is clear. VAT on return shipping within the EU is typically handled as an intra-community movement if both parties are VAT-registered businesses, but confirm with your finance team for cross-border moves involving non-business employees.
United Kingdom. Post-Brexit, the UK is now a third country for EU customs purposes. This means shipping a laptop from an EU country to the UK (or vice versa) triggers import procedures, customs documentation, and potentially import VAT. Postponed VAT Accounting (PVA) is available for UK VAT-registered businesses to manage the cash flow impact. Any cross-border return between the EU and UK requires a commercial invoice, HS commodity code (laptops typically fall under 8471.30), and confirmation of the shipment's declared value for insurance purposes.
Estonia and the Nordics. Logistics infrastructure is reliable across these markets. The main complexity is distance, a return from a remote region of Finland or Sweden may require additional transit time and carrier coordination. Build extra lead time into the timeline.
General EU rule. Within EU member states, intra-community shipments do not trigger customs duties, but they still require tracking, insurance, and proper packaging for electronics. Do not assume domestic logistics apply just because both parties are in the EU.
The return kit — the single most effective change
If there is one operational change that has the highest impact on device recovery rates, it is this: send the return kit before the last day, not after.
A return kit is a pre-packaged, ready-to-ship box sent directly to the employee's home address. It contains protective packaging sized for a laptop, a pre-printed return label with the correct address and carrier details, clear packing instructions, and everything the employee needs to complete the return without making a single decision.
The employee's job becomes: put the laptop in the box, seal it, drop it at the nearest collection point or schedule a pickup.
That is it. No sourcing packaging. No figuring out the address. No deciding which carrier to use. No customs paperwork on their end.
This matters because device retrieval fails when it requires effort from someone who is no longer invested. A return kit removes almost all of that effort. The decision was already made. The box is there. The label is ready.
Companies using return kits consistently recover more devices, receive them in better condition, and close the offboarding process faster than those relying on employees to arrange their own returns.
The step-by-step retrieval process
Here is the process that works, built for distributed teams with employees across multiple countries.
Step 1. Document the obligation at onboarding, not offboarding.
Device return obligations should be in the employment contract and the onboarding documentation. Employees should know from day one that the laptop is company property and must be returned when employment ends. This is not about creating friction, it is about setting expectations so the return request later does not come as a surprise.
Step 2. Trigger retrieval at resignation, not on the last day.
The moment an employee submits their notice, the retrieval process starts. Not when they leave. Not on their final Friday. The week after they resign, when they are still engaged and accessible.
Send a warm, clear communication from HR, not IT, acknowledging their resignation, thanking them, and explaining what happens with the device. Frame it as a simple, handled process. Not a demand.
Step 3. Dispatch the return kit within 48 hours of resignation.
Order the return kit to their home address. This should happen fast, before they mentally check out. The earlier the kit arrives, the more likely it is to be used.
For cross-border returns: confirm the correct carrier for the specific country pair before dispatching. Confirm customs requirements if the return crosses a customs boundary (EU to UK, or non-EU). Ensure the declared value on the label matches the device's replacement value for insurance coverage.
Step 4. Set a clear return deadline with a specific date.
"Please return within 5–7 working days of receiving the kit" is a complete instruction. A specific date ("please return by [date]") is even better. Vague deadlines are ignored. Specific dates get actioned.
Step 5. Send one automated reminder, not five manual chase emails.
If the device has not been returned within 3 days of the deadline, send one reminder. Keep it short, practical, and non-accusatory. Most delays are logistical, not intentional. Offer to help if something is not working with the return process.
Step 6. Track the shipment and confirm receipt.
Every return should be tracked end to end. When the device is received, send a confirmation to the former employee. This closes the loop professionally and is your documentation that the return was completed.
Step 7. Wipe the device before redeployment.
Once the device is back, wipe it to NIST 800-88 standard before any reuse. Keep the certificate of destruction for GDPR compliance. Inspect condition. Log the device as returned in your asset management system. Decide: redeploy, store, resell, or retire.
What to do when someone does not return the device
Despite the best process, some devices do not come back. Here is the order of escalation.
First: check in, not chase. A second communication from HR, not IT, asking if there is anything blocking the return. Sometimes it is genuinely logistical. The box got damaged. The collection point was closed. A practical offer to help resolves most cases.
Second: formal written request. A written notice, ideally from legal or HR, reminding the employee of their contractual obligation to return company property and setting a final deadline. Keep this professional, it is documentation, not a threat.
Third: legal recourse. In most EU jurisdictions, an employer can pursue the cost of an unreturned device through civil proceedings. This is a last resort and rarely worth the cost for a single laptop, but for high-value devices or situations where data exposure is a concern, consult your employment lawyer about jurisdiction-specific options.
Fourth: remote wipe. If the device has been enrolled in MDM and has not been returned, initiate a remote wipe. This protects data even if the physical device is not recovered. Document that this was done.
Practical reality: most non-returns resolve with a patient, clear process. The companies with the lowest loss rates are not the ones with the most aggressive policies, they are the ones with the clearest and most frictionless return process.
The cost of getting this wrong
The financial case for a structured retrieval process is straightforward.
The hardware value of an average company laptop is €1,000–€2,000. That is the replacement cost if a device is not returned. According to Capterra's survey of 300 HR professionals, 71% reported seeing at least one departing employee fail to return company equipment. For a company offboarding 20 employees per year, even a 20% non-return rate represents €4,000–€8,000 in direct hardware losses annually, before accounting for the IT time spent chasing returns.
The security cost is harder to quantify. A laptop with access to company systems, customer data, or intellectual property represents ongoing exposure for as long as it remains unrecovered. Under GDPR, a breach resulting from an unretrieved device is the company's liability, not the former employee's.
The reputational cost is smaller but real. How a company handles offboarding is part of its employer brand. An awkward, disorganised retrieval process is the last thing a departing employee experiences, and departing employees talk.
Frequently asked questions
Can an employer deduct the cost of an unreturned laptop from a final paycheck?
This depends on jurisdiction. In many EU countries, including Germany and the Netherlands, deductions from final pay for unreturned equipment are heavily restricted or prohibited without explicit written agreement. In the UK, deductions are permissible if there is a written agreement in the employment contract. Always consult local employment law or an HR lawyer before making deductions — getting this wrong can create additional legal exposure.
Does GDPR require a specific standard of data wiping?
GDPR requires that personal data is deleted securely, but does not prescribe a specific technical standard. In practice, NIST 800-88 (Revision 1) is the widely recognised benchmark for secure erasure, covering both overwriting and degaussing methods depending on the media type. Certified wiping with a certificate of destruction is best practice for audit purposes.
How do you handle retrieval when an employee has been terminated, not resigned?
The process is the same but the timeline is compressed. Initiate retrieval on the day of termination. If the relationship ended badly, a formal written request from legal or HR is appropriate from the start. Remote wipe via MDM should happen immediately if the device is enrolled. For international employees, ensure the return kit is dispatched the same day where possible.
What happens if the laptop is damaged in transit?
If the return is being managed by a professional device operations platform, the shipment will be fully insured for the device's replacement value. For in-house returns, standard carrier insurance typically covers €500–€1,000, often less than the device's value. If a significant amount of hardware is moving internationally, consider cargo insurance as a separate line item. Raal covers full insurance on every device in transit as a default.
How long should the retrieval process take?
From the moment the return kit is dispatched to the moment the device is back in hand: 3–7 working days for domestic EU returns, 5–10 working days for cross-border EU returns, and 7–14 working days for EU to UK or other international returns. Cross-border timelines depend on customs clearance, which can add 2–3 days unexpectedly. Build buffer into your offboarding timelines.
Is there a legal requirement to return company equipment in Europe?
Yes. Company-issued equipment remains the employer's property, and employees have a legal obligation to return it at the end of employment. The specifics of how this is enforced vary by country — it should be documented clearly in employment contracts. Device return obligations are separate from the employer's GDPR obligations regarding data on the device, which exist regardless of whether the device is returned.
The bottom line
Laptop retrieval from remote employees is not complicated. It is just an operational process that most companies have never actually designed.
The companies that recover devices consistently do three things: they set expectations at onboarding, they trigger the process at resignation not departure, and they send a return kit that makes the employee's job as frictionless as possible.
For teams with employees across multiple countries, the cross-border logistics, customs documentation, carrier selection, insurance, country-specific legal requirements, add a layer of complexity that makes in-house management increasingly difficult at scale.
That is the operational gap Raal was built to close.
Raal handles device retrieval end to end return kits dispatched to the employee's door, customs and carrier coordination handled, every device fully insured in transit, and secure data wiping on return. Across 150+ countries.
→ See how it works at raal.io or estimate the cost of your next retrieval at raal.io/estimate
