Persons Holding a Customer's Personal Information (disposal of customer records)

This chapter makes it an infraction to throw away or abandon customers' unencrypted, unredacted personal information (as defined in the breach law, such as SSNs and financial account numbers) in a publicly accessible place without first destroying it. It covers paper and digital records.