Laws Pertaining to Shredding
HIPAA - Health Insurance Portability and Accountability Act
HIPAA requires health care organizations to protect the use, transmission and storage of individually Iidentifiable health information including names, contact information, license numbers, account numbers, dates of birth and other information.
Click here to view our HIPAA brochure.
FACTA - Fair and Accurate Credit Transactions Act
FACTA applies to any person or company that “maintains or otherwise possesses consumer information or any compilation of consumer information, derived from consumer reports for a business purpose”. For example:
FACTA includes a specific rule regarding the proper disposal of consumer report information and records. Several examples of how to comply with the requirements are included in the rule, i.e.implementing and monitoring compliance with policies and procedures that require shredding or other forms of destruction and contracting with a third party to properly dispose of consumer information. Companies are responsible for monitoring the performance of third parties.
(we do our shredding ON-SITE)
Click here to view our FACTA brochure.
GLB – Gramm-Leach-Bliley
The GLB Act requires financial institutions to have a security plan to protect personal consumer information. The plan must address information systems, including how personal information is stored and destroyed.
Identity Theft
Unlike most other privacy and identity theft protection measures which set out rules to safeguard information, this law is intended to punish those who misuse information and therefore affects all US residents. There are no compliance regulations, but companies are strongly advised to ensure they have safe information handling practices in place to reduce the risk of information they store falling into the wrong hands.
Visit our Downloads page for more flyers and brochures.