Overview
Personal identifying information is often collected by businesses and government and is stored in various formats—digital and paper. At least 35 states and Puerto Rico have enacted laws that require either private or governmental entities or both to destroy, dispose of, or otherwise make personal information unreadable or indecipherable.
The Federal Trade Commission’s Disposal Rule also requires proper disposal of information in consumer reports and records to protect against “unauthorized access to or use of the information.” The rule applies to consumer reports or information derived from consumer reports. HIPAA also has disposal requirements for protected health information.
PLEASE NOTE: NCSL serves state legislators and their staff. This site provides general comparative information only and should not be relied upon or construed as legal advice.
