Privacy Law Library

Disposal of Business Records Containing Personal Identifying Information

Texas Records Disposal Law

Data security

Requires businesses to shred, erase, or otherwise make customers' personal identifying information unreadable when disposing of records, and to delete disputed dishonored-check records within 30 days of agreement or a police report.

Where

Texas

Citation

Tex. Bus. & Com. Code 72.004; see also 72.051

Status

In force

In force since

2009-04-01

Enforced by

Texas Attorney General

People can sue

No

Penalties

Up to $500 per improperly disposed record (72.004(d)); up to $1,000 for failing to delete disputed check records (72.051(d)).

Applies to

• Businesses disposing of records containing customers' personal identifying information, except GLBA financial institutions and Insurance Code 601/602 covered entities (72.004(a)-(b))
• Businesses that accept checks, for deletion of disputed dishonored-check records (72.051)