Business Records Destruction
07 Apr 2009 | Category: uncategorized | Author: admin
Effective June 1, 2005, the FTC’s Disposal Rule requires any business or individual that utilizes credit report information to properly dispose of that information to protect against unauthorized access to or use of the information. The Rule can be found at http://www.ftc.gov/os/2004/11/041118disposalfrn.pdf.
Examples of consumer reports include credit reports, credit scores, reports businesses or individuals receive with information relating to employment background, check writing history, insurance claims, residential or tenant history, or medical history.
Affected business include mortgage brokers, lenders, insurers, employers, debt collectors, and car dealers.
Financial institutions, including mortgage brokers, are subject to both the Disposal Rule and the Gramm-Leach-Bliley (GLB) Safeguards Rule. The Safeguards Rule requires institutions to take steps to protect sensitive customer information.
Financial institutions should incorporate practices dealing with the proper disposal of consumer information into the information security program that the Safeguards Rule requires.
The Rule requires disposal practices that are reasonable and appropriate to prevent the unauthorized access to, or use of, information in a consumer report, such as burning, pulverizing, destroying, erasing, or shredding papers or electronic media so that the information cannot be read or reconstructed.
It is also possible to conduct due diligence and hire a third party for records destruction. Due diligence includes obtaining information about the disposal company from several references, requiring that the disposal company be certified by a recognized trade association, reviewing and evaluating the disposal company’s information security policies or procedures, or reviewing an independent audit of a disposal company’s operations and its compliance with the Rule.
You should consult the following FTC publications:
Comments
This article hasn't been commented yet.
Write a comment
* = required field