Destruction of Customer Records Containing Personally Identifiable Information

Requires businesses that discard customer records they no longer need to keep to take reasonable steps to destroy the personally identifiable information in them. Personally identifiable information is defined broadly and includes contact details, SSNs, government ID numbers, and medical, financial, tax, and disability information.