Refurbisher Authorisation & Licence

Setting up a refurbishment business in India is one of the more commercially attractive e-waste plays right now — strong supply of used corporate IT equipment, rising demand for affordable electronics, and an EPR framework that pays you to extend product life. But operating legally requires two things: a refurbisher authorisation from your State Pollution Control Board (SPCB) and a CPCB EPR portal registration. Without both, you cannot legally receive used electrical and electronic equipment (EEE), and you cannot issue EPR compliance certificates.

The business logic is solid. India's corporate sector retires millions of laptops, desktops, and smartphones every year. A well-run refurbisher restores serviceable units to retail quality, sells them through B2B, government (GeM), and e-commerce channels, and earns EPR certificate income on the side. The E-Waste (Management) Rules 2022 — the governing framework — require proper authorisation, documented data sanitisation discipline, and quarterly EPR returns. Get the compliance right from the start, and the business model is both legal and profitable.

At a Glance

• Who needs it: Any business that receives used EEE, restores it to working condition, and resells — mandatory under E-Waste (Management) Rules 2022 regardless of monthly volume or business size.
• Governing authority: SPCB of the state where your facility is located for refurbisher authorisation; CPCB (Central Pollution Control Board) for national EPR portal registration.
• Turnaround: SPCB authorisation: 60–90 days from a complete application submission; full facility-to-operations including BIS certification: 6–10 months.
• Key threshold: No de minimis exemption exists under the 2022 Rules — authorisation is required for any refurbisher, regardless of unit count or turnover.
• EPR certificates: Refurbisher category certificates, valued per unit or per kg depending on the EEE category, saleable to Producers, Importers, and Brand Owners (PIBOs) for their own compliance targets.
• Data security: NIST 800-88 or DoD 5220.22-M compliant data wipe is required; certificates of data destruction are expected by corporate source clients and now carry legal weight under the DPDP Act 2023.

What's New for FY 2026-27

The E-Waste (Management) Rules 2022 enforcement regime has tightened steadily. These are the key changes affecting refurbishers from FY 2026-27 onwards.

• CPCB EPR Portal Updates: The registration module now requires stricter capacity declarations — monthly unit count and kg capacity must match your SPCB authorisation exactly. Mismatches trigger compliance flags and can freeze your certificate-issuance capability.
• SPCB Enforcement Intensification: State boards in Maharashtra, Karnataka, Delhi NCR, and Tamil Nadu have increased inspection frequency for the e-waste sector. Unregistered refurbishers are being prosecuted under Section 15 of the Environment (Protection) Act 1986, which carries financial penalties and business closure orders.
• BIS Conformity for Refurbished Products: Refurbished electronics falling under mandatory BIS product orders must carry BIS certification even when sold as refurbished goods. This layer became actively enforced in 2025 and caught many informal operators without prior warning.
• DPDP Act 2023 Obligations: The Digital Personal Data Protection Act creates legal obligations around personal data found on refurbished devices. A certificate of data destruction is no longer just a commercial courtesy — it is a compliance document with genuine legal weight for both the refurbisher and the source client.
• GeM Refurbished Category Expansion: The Government e-Marketplace has expanded its refurbished IT equipment listings and increased procurement through this channel. ZED Bronze certification or above is effectively required for higher-value government contracts in this category.
• EPR Certificate Market Dynamics: More refurbishers entered the market through FY 2025-26, compressing per-certificate margins in certain categories. Operators with documented quality processes and established corporate source networks maintain a clear pricing advantage.

Who Needs a Refurbisher Authorisation

• ITAD Companies: Corporate IT asset disposition businesses receiving laptops, desktops, and servers from BFSI, IT/ITES, and BPO clients — the SPCB authorisation is your legal operating licence for this work.
• Electronics Retailers Building Refurbished Lines: Any retailer or e-commerce seller sourcing used electronics for restoration and resale needs formal authorisation before accepting commercial volumes from corporate or bulk sources.
• OEM Service Centres: Authorised service centres of major brands that refurbish out-of-warranty devices must hold their own refurbisher authorisation separately from the original equipment manufacturer's producer registration.
• Social Enterprises and NGOs: Organisations redistributing IT equipment to schools or low-income communities still need authorisation — there is no exemption under the 2022 Rules for non-profit intent or charitable purpose.
• Import-Export Businesses: Companies importing used electronics for domestic refurbishment require both SPCB authorisation and the relevant import clearances. Export of refurbished products to overseas buyers requires additional documentation depending on the destination country.
• MSME Entrepreneurs: Small businesses building affordable electronics supply for Tier 2 and Tier 3 markets are a fast-growing entrant segment. Formal authorisation is the gateway to B2G sales through GeM, e-commerce platform listings, and EPR certificate income that informal operators simply cannot access.

How It Actually Works

The path from business idea to a licensed, operational refurbishment facility runs through six stages. Each has its own dependencies — you cannot register on the CPCB portal without the SPCB authorisation in hand, and you cannot file the SPCB application without a real facility address and an approved layout plan.

Step 1: Site Assessment and Process Design

You start with the facility — location, size, layout, and process flow. The SPCB wants a factory-style floor plan with clearly demarcated zones: incoming inspection, receiving storage, diagnostic stations, refurbishment benches, data sanitisation room, QA testing area, and finished goods storage. Land documents, building approvals, and power connections must be confirmed before the application is filed. Target capacity — units per month and tonnes per year — is declared at this stage and directly drives both your authorisation conditions and your EPR certificate quota on the CPCB portal.

Step 2: Data Sanitisation Infrastructure

Data security is the single biggest differentiator between a refurbisher that wins corporate contracts and one that does not. You need a physically secure room — ideally CCTV-monitored with access logs — with NIST 800-88 or DoD 5220.22-M compliant erasure software installed on dedicated hardware. Your Standard Operating Procedures (SOPs) for data handling become part of the SPCB application package. Under the DPDP Act 2023, corporate and BFSI clients will increasingly audit your data destruction process before committing to any supply agreement.

Step 3: SPCB Authorisation Application

Once the facility is ready — or substantially ready, as some states accept applications at 75% completion — you file the refurbisher authorisation application with the SPCB. The package includes: a facility layout with zone demarcation, process flow diagrams, an equipment list, environmental SOPs, downstream channel agreements showing who receives non-refurbishable rejects for dismantling or recycling, and proof of land or building legitimacy. The SPCB inspects, may request clarifications, and then issues the Consent for Establishment (CFE) and Consent for Operations (CFO), or a combined authorisation. Allow 60–90 days from the date of a complete, well-supported submission.

Step 4: CPCB EPR Portal Registration

With the SPCB authorisation in hand, you register on the CPCB EPR portal as a Refurbisher. The registration captures your facility details, authorised capacity, SPCB authorisation number, and the Schedule I EEE categories you will handle. Once the CPCB approves the registration, you gain the ability to generate EPR certificates — one certificate per unit refurbished, or per kg depending on the category — and list them for purchase by PIBOs who need certificates to meet their own annual compliance targets.

Step 5: BIS Compliance for Output Products

If your refurbished products fall under mandatory BIS product orders — which covers most IT equipment and consumer electronics — you need BIS conformity assessment even for the refurbished version of those products. This involves product testing at a BIS-recognised laboratory, followed by formal certification and ISI marking. Products without the required BIS mark cannot be sold legally through retail stores or e-commerce platforms. Factor 4–8 weeks and per-model testing fees into your launch timeline before your first public listing goes live.

Step 6: Commercial Launch and Source Network

With authorisation, portal registration, and BIS compliance in place, you can formally execute supply agreements with corporate IT refresh teams, government surplus departments, and e-commerce return programs. Your sales channels open in full: B2B bulk contracts, GeM seller registration for government procurement tenders, e-commerce listings on major platforms, and direct B2C sales. EPR certificate issuance begins from the first month of operations, adding a recurring revenue line on top of product sales with near-zero incremental cost per certificate.

A Real Example: 500 Laptops a Month in Pune

A mid-sized ITAD company in Pune begins receiving 500 laptops per month from a consortium of three BFSI clients. Here is what the operating economics look like at steady state in year one.

• Intake cost: 500 laptops/month × ₹2,500 average acquisition price = ₹12.5 lakh/month in sourcing spend.
• Refurbishment yield: 80% (400 units) reach retail-grade; 15% (75 units) sold as-is through B2B bulk at a lower price point; 5% (25 units) transferred to an authorised dismantler.
• B2B revenue: 200 units × ₹18,000 average realisation = ₹36 lakh/month.
• GeM and B2G revenue: 100 units × ₹22,000 average = ₹22 lakh/month.
• B2C and e-commerce revenue: 175 units × ₹15,000 average = ₹26.25 lakh/month.
• EPR certificate income: 475 certificates × ₹800 average per unit = ₹3.8 lakh/month.

Gross revenue of approximately ₹88 lakh per month against sourcing, operations, staffing, and compliance costs of roughly ₹63–66 lakh places EBITDA at ₹20–25 lakh per month at steady state. The EPR certificate income — around ₹45 lakh annually — is not the primary revenue driver, but it adds real margin with near-zero incremental cost once the CPCB portal registration is in place and the issuance workflow is running.

After Authorisation: Your Annual Compliance Calendar

The SPCB authorisation and CPCB registration are not one-time events. Refurbishers have a structured annual compliance schedule under the E-Waste (Management) Rules 2022 that must be maintained to keep the business operational.

• Quarterly EPR Returns: File production and certificate data on the CPCB portal every quarter covering units received, units refurbished, EPR certificates generated and sold, and downstream disposal details for non-refurbishable material. Missing a return suspends your certificate-issuance capability until the overdue filing is accepted.
• SPCB Authorisation Renewal: Your SPCB authorisation requires annual renewal or periodic re-inspection depending on your state's rules. Document actual throughput against your declared capacity — deviations should be reported proactively, not discovered by the SPCB during a surprise inspection.
• Downstream Channel Verification: Annually confirm that your dismantler and recycler partners for non-refurbishable rejects remain listed and active on the CPCB portal. Sending material to a de-listed operator invalidates your EPR claims for that quarter.
• BIS Re-certification: Adding new product models or EEE categories to your refurbishment scope requires fresh BIS conformity assessment for each new model before it can be sold through any retail or online channel.
• Data Destruction Log Maintenance: Maintain device-level destruction records for a minimum of three years. These logs are increasingly requested by DPDP-aware corporate clients during their own supplier audits and occasionally by SPCBs during facility inspections.

A refurbisher whose SPCB authorisation lapses must stop all commercial activity — receiving, processing, and selling EEE — until renewal is formally processed and reinstated. File your renewal application at least 60 days before your authorisation expiry date.

Where Refurbishers Run Into Trouble

• Operating Without Authorisation: The most common failure — starting operations informally with plans to regularise later. SPCB enforcement has intensified significantly; prosecution under Section 15 of the Environment (Protection) Act 1986 carries financial penalties, business closure orders, and in repeat cases personal liability for company directors.
• Under-Declaring Capacity: Declaring a lower monthly unit count to reduce the application burden, then exceeding it in practice. EPR certificate quotas are tied to declared capacity — operating above your authorised limit invalidates certificates already issued in that period.
• Sending Rejects to Unauthorised Channels: Disposing of non-refurbishable material through informal scrap dealers or unregistered recyclers voids your EPR compliance status for the affected period and creates joint liability exposure under the Rules.
• No Formal Data Destruction Procedures: Accepting corporate devices without a documented, auditable data wipe process. A single data breach incident destroys the source relationship permanently and triggers liability under the DPDP Act 2023 for both the refurbisher and potentially the source organisation.
• BIS Non-Compliance on Output: Selling refurbished products without the required BIS certification under mandatory product orders violates the Consumer Protection Act 2019, results in product seizure and platform delisting, and can attract Consumer Commission complaints from buyers.
• Skipping GeM Registration: Building government procurement as a revenue line without completing GeM seller registration and ZED certification. Government buyers cannot legally purchase from sellers outside the GeM platform, regardless of product quality or price.
• Missing Quarterly EPR Returns: Treating quarterly filing as optional or assuming one annual return is sufficient. Quarterly returns are mandatory under the 2022 Rules — missed returns freeze certificate issuance on the CPCB portal until every delinquent filing is submitted and accepted.

What You Receive at the End

• SPCB Refurbisher Authorisation (CFE and CFO or combined format) — your legal operating licence under E-Waste (Management) Rules 2022
• CPCB EPR Portal registration with refurbisher certificate-issuance capability enabled and capacity declarations matched to your SPCB authorisation
• Approved process flow documentation, zoned facility layout plan, and environmental SOPs accepted by the SPCB
• Data sanitisation SOP (NIST 800-88 and DoD 5220.22-M format) and per-device certificate of data destruction template
• BIS conformity certification for your first refurbished product model, with ISI marking clearance for retail and e-commerce sale
• Corporate IT refresh supply agreement templates, government surplus tie-up documentation, and B2C buy-back program framework
• GeM seller registration support package and ZED Bronze certification documentation
• EPR quarterly return filing template, compliance calendar for the first 12 months of operations, and downstream channel verification checklist

How to Get Started

The first step is a 45-minute site assessment call. We review your proposed facility location, intended monthly capacity, existing source pipeline, and the EEE categories you plan to handle. This produces a readiness checklist — what you have, what you are missing, and what needs to move first. If your facility is still in the planning stage, we can advise on layout zone requirements and environmental compliance triggers before you sign a lease or commit to fit-out costs.

Once the readiness assessment is complete, we assign a dedicated compliance manager who coordinates facility documentation, SPCB application preparation, CPCB portal registration, and BIS compliance workstreams in parallel wherever the process allows — typically saving 4–6 weeks compared to a purely sequential approach. From engagement start to SPCB authorisation, the target is 60–90 days after the facility is in place. From engagement start to full operational launch including BIS certification and first EPR certificate issuance: 6–10 months.