HIPAA
GLB (Gramm Leach Bliley)
Gramm Leach Bliley (GLB) is another federal law with a much broader scope than HIPAA. This law was designed to compel financial institutions to "respect the privacy of its customers and to protect the security and confidentiality of those customers' non-public personal information." This language suggests that paper documents containing such personal information should also be protected when in use and safely destroyed when no longer current and usable.
Federal Trade Commission Report
http://www.ftc.gov/privacy/glbact
FACTA (Fair and Accurate Credit Transactions Act
The Fair and Accurate Credit Transactions Act of 2003 also known as the FACT Act was signed into law on December 4, 2003. The Act amends the Fair Credit Reporting Act (``FCRA''). The Act contains a number of provisions intended to combat IDENTITY THEFT and consumer fraud and related crimes. Specifically the act requires the destruction of PAPERS CONTAINING CONSUMER INFORMATION. Virtually every business or organization that is bound by this law.
The proposed DISPOSAL RULE
Sec. 682.3 Proper disposal of consumer information.
(a) Standard. Any person who maintains or otherwise possesses consumer information, or any compilation of consumer information, for a business purpose must properly dispose of such information by taking reasonable measures to protect against unauthorized access to or use of the information in connection with its disposal.
(b) Examples. Reasonable measures to protect against unauthorized access to or use of consumer information in connection with its disposal would include:
(1) Implementing and monitoring compliance with policies and procedures that require the burning, pulverizing, or shredding of papers containing consumer information so that the information cannot practicably be read or reconstructed.
