Alabama § 8-38-10 Disposal of Records Containing Sensitive Personally Identifying Information

Alabama Statutes

§ 8-38-10 — Disposal of Records Containing Sensitive Personally Identifying Information

Alabama·Title 8 Commercial Law and Consumer Protection·Ch. 38 Data Breach Notification Act of 2018

A covered entity or third-party agent shall take reasonable measures to dispose, or arrange for the disposal, of records containing sensitive personally identifying information within its custody or control when the records are no longer to be retained pursuant to applicable law, regulations, or business needs. Disposal shall include shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any reasonable means consistent with industry standards.

Free access — add to your briefcase to read the full text and ask questions with AI

A covered entity or third-party agent shall take reasonable measures to dispose, or arrange for the disposal, of records containing sensitive personally identifying information within its custody or control when the records are no longer to be retained pursuant to applicable law, regulations, or business needs. Disposal shall include shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any reasonable means consistent with industry standards.

Alabama § 8-38-10 (Disposal of Records Containing Sensitive Personally Identifying Information) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.