Posted by CarolF/NC on 12/5/13 8:27am
Msg #495087

North Carolina Identity Theft Protection Act

§ 75-64. Destruction of personal information records.
(a) Any business that conducts business in North Carolina and any business that
maintains or otherwise possesses personal information of a resident of North Carolina
must take reasonable measures to protect against unauthorized access to or use of the
information in connection with or after its disposal.
(b) The reasonable measures must include:
(1) Implementing and monitoring compliance with policies and procedures
that require the burning, pulverizing, or shredding of papers containing
personal information so that information cannot be practicably read or
reconstructed.
(2) Implementing and monitoring compliance with policies and procedures
that require the destruction or erasure of electronic media and other
nonpaper media containing personal information so that the information
cannot practicably be read or reconstructed.
(3) Describing procedures relating to the adequate destruction or proper
disposal of personal records as official policy in the writings of the business entity

Disclaimer: This is not original work. This is a copy and paste from NC Article 2A Identity Theft Protection Act