Alabama § 8-38-10 Disposal of Records Containing Sensitive Personally Identifying Information

Alabama Statutes

§ 8-38-10 — Disposal of Records Containing Sensitive Personally Identifying Information

Alabama § 8-38-10

Title 8Commercial Law and Consumer Protection

Ch. 38Data Breach Notification Act of 2018

This text of Alabama § 8-38-10 (Disposal of Records Containing Sensitive Personally Identifying Information) is published on Counsel Stack Legal Research, covering Alabama primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Ala. Code § 8-38-10 (2026).

Text

A covered entity or third-party agent shall take reasonable measures to dispose, or arrange for the disposal, of records containing sensitive personally identifying information within its custody or control when the records are no longer to be retained pursuant to applicable law, regulations, or business needs. Disposal shall include shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any reasonable means consistent with industry standards.

Free access — add to your briefcase to read the full text and ask questions with AI

A covered entity or third-party agent shall take reasonable measures to dispose, or arrange for the disposal, of records containing sensitive personally identifying information within its custody or control when the records are no longer to be retained pursuant to applicable law, regulations, or business needs. Disposal shall include shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any reasonable means consistent with industry standards.