Disposal of Business Records Containing Personal Information

  1. Law
  2. Georgia Code
  3. Commerce and Trade
  4. Business Administration
  5. Disposal of Business Records Containing Personal Information

Checkout our iOS App for a better way to browser and research.

A business may not discard a record containing personal information unless it:

  1. Shreds the customer's record before discarding the record;
  2. Erases the personal information contained in the customer's record before discarding the record;
  3. Modifies the customer's record to make the personal information unreadable before discarding the record; or
  4. Takes actions that it reasonably believes will ensure that no unauthorized person will have access to the personal information contained in the customer's record for the period between the record's disposal and the record's destruction.

(Code 1981, §10-15-2, enacted by Ga. L. 2002, p. 551, § 8; Ga. L. 2015, p. 1088, § 11/SB 148.)

Editor's notes.

- Ga. L. 2015, p. 1088, § 11/SB 148, effective July 1, 2015, reenacted this Code section without change.

Law reviews.

- For article, "The Growing Threat of Identity Theft and Its Implications for Employers," see 11 Ga. St. B. J. 27 (2006).


Download our app to see the most-to-date content.