After a data breach, solicitors tell you to keep everything — ICO letters, bank statements, fraud evidence. They rarely tell you to destroy the rest. Old statements, printed IDs and medical letters in the bin are how a second breach happens. UK GDPR requires "appropriate technical and organisational measures" — at home that starts with a cross-cut shredder rated P-4 or higher.
What to buy: home vs small office
Home (1 person, occasional): 10-12 sheet cross-cut, 20L bin. Shreds staples and cards. Small office / landlord (3-5 people): 16-18 sheet, 30min+ runtime, pull-out bin. Avoid strip-cut — it fails GDPR destruction standards and can be reassembled.
Top picks
1. Fellowes Powershred 60Cs — best for most homes
10-sheet cross-cut (4x40mm, P-4), 22L bin, shreds cards and staples. Quiet enough for a flat. Usually £110-140. If you process backlog weekly, step up.
2. Fellowes Powershred 79Ci — best for backlog / small office
16-sheet, 100% jam-proof, 23L pull-out bin, 20min runtime. Handles a filing cabinet clear-out without overheating. Usually £220-260. The one we recommend for landlords and contractors with 5+ years of paperwork.
3. Budget micro-cut (any P-5 6-sheet)
Slower, smaller bin, but P-5 destruction for under £70. Fine if you shred 5 minutes a week and empty often.
How to shred for a claim
- Keep: breach notification, ICO complaint ref, bank fraud letters, GP/counselling notes, claim diary.
- Shred: old statements, expired IDs, payslips over 6 years, junk mail with account numbers.
- Shred in batches, oil the cutters every 30min of use, and keep a one-page log of what you kept and why.
Disclosure: As an Amazon Associate we earn from qualifying purchases. We only recommend P-4+ cross-cut machines suitable for GDPR home use.