Elevated Shredding
Locally Owned and Operated in Flagstaff, AZ
Compliance
Who must comply?
​
The Disposal Rule applies to people and both large and small organizations that use consumer reports. Among those who must comply with the Rule are:
-
Consumer reporting companies
-
Lenders
-
Insurers
-
Employers
-
Landlords
-
Government agencies
-
Mortgage brokers
-
Automobile dealers
-
Attorneys or private investigators
-
Debt collectors
-
Individuals who obtain a credit report on prospective nannies, contractors, or tenants
-
Entities that maintain information in consumer reports as part of their role as service providers to other organizations covered by the Rule
Types of Compliance
The Disposal Rule, a part of the Fair and Accurate Credit Transactions Act of 2003 (FACTA), which calls for the proper disposal of information in consumer reports and records to protect against “unauthorized access to or use of the information.”
With identity theft and other types of information fraud on the rise, it’s important to know that the way you shred your confidential information can make a big difference. When the process is not completely secure you run the risk of your sensitive materials falling into the wrong hands. You open yourself up to severe consequences including sanctions, fines, fraud, disclosure of trade secrets, bad publicity, and lawsuits. That’s why it’s important to work with a NAID AAA certified shredding company.
GLBA is a federal law enacted in the United States to control the ways financial institutions deal with the private information of individuals. The Act consists of three sections:
-
The Financial Privacy Rule, which regulates the collection and disclosure of private financial information
-
The Safeguards Rule, which stipulates that financial institutions must implement security programs to protect such information
-
Pretexting provisions, which prohibit the practice of pretexting or accessing private information using false pretenses
The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for sensitive patient data protection. Companies that deal with protected health information (PHI) must have physical, network, and process security measures in place and follow them to ensure HIPAA Compliance. Covered entities (anyone providing treatment, payment, and operations in healthcare) and business associates (anyone who has access to patient information and provides support in treatment, payment, or operations) must meet HIPAA Compliance. Other entities, such as subcontractors and any other related business associates must also be in compliance.
This law applies to all health care providers, health care plans and health care clearinghouses.