Businesses generally handle compliance well for devices that are still in use, but when replaced, it can be easy to overlook the secure erasure of data stored on the device. This can potentially catch companies out.
It is easy to forget about old devices. When supplying a new phone or laptop, the priority is to get the new device working well rather than worrying about what happens to the old ones. This could be a bottom drawer, or an old cupboard, both common graveyards for forgotten devices, where they collect dust, until sent to the local dump sometime later.