Legal Requirements

How Do I Protect My Business, My Clients and Myself?

Every business has information that would interest an identity thief or competitor and should be kept confidential. Every business also collects information about clients, customers, patients, employees, vendors and associates. Those people have a legal right to know their data is protected. Any business that discards confidential data without destroying it exposes itself to the risk of criminal and civil prosecution, as well as the costly loss of business and reputation. You can’t stop Identity Theft or Fraud from happening, but you can reduce the risk by safeguarding the confidential data that you are entrusted with.

Some records that require secure destruction are: personnel files and employment records, accounting records, mailing lists, patient files, payroll records, bank statement and canceled checks, credit card statements, medical/health records, research and development data, confidential memos and letters, documents with legal signatures, insurance records, and employment applications.

Does Your Business Comply with the Law? Are your Employees Trained to Protect Confidential Data?

HIPAA (1996) and HITECH (2009) Trade Secret Protections (1985)
Gramm/Leach/Bliley (1999) ID Theft Laws
Privacy Act (1974) Red Flags Rule (2010)
Economic Espionage Act (1996) FACTA Disposal Rule (2003)
Sarbanes/Oxley Act (2002) Regulation S-P

Every data protection regulation in the United States requires that organizations train employees to protect confidential customer and employee information.

As a NAID member company, Keystone Mobile Shredding, Inc. is proud to offer The Employee Information Destruction Training Program for your employees. We can also provide templates for the Business Associate Agreement (required by HIPAA/HITECH) and an Information Destruction Policy.

Other Resources