Michigan § 445.72a Destruction of data containing personal information required; violation as misdemeanor; fine; compliance; "destroy" defined.

Michigan Statutes

§ 445.72a — Destruction of data containing personal information required; violation as misdemeanor; fine; compliance; "destroy" defined.

Michigan § 445.72a

Ch. 445TRADE AND COMMERCE

Act 452 of 2004IDENTITY THEFT PROTECTION ACT (445.61-445.79d)

This text of Michigan § 445.72a (Destruction of data containing personal information required; violation as misdemeanor; fine; compliance; "destroy" defined.) is published on Counsel Stack Legal Research, covering Michigan primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Mich. Comp. Laws § 445.72a (2026).

Text

IDENTITY THEFT PROTECTION ACT (EXCERPT) Act 452 of 2004 445.72a Destruction of data containing personal information required; violation as misdemeanor; fine; compliance; "destroy" defined. Sec. 12a.

(1)Subject to subsection (3), a person or agency that maintains a database that includes personal information regarding multiple individuals shall destroy any data that contain personal information concerning an individual when that data is removed from the database and the person or agency is not retaining the data elsewhere for another purpose not prohibited by state or federal law. This subsection does not prohibit a person or agency from retaining data that contain personal information for purposes of an investigation, audit, or internal review.

(2)A person who knowingly violates this sec

Free access — add to your briefcase to read the full text and ask questions with AI

IDENTITY THEFT PROTECTION ACT (EXCERPT) Act 452 of 2004 445.72a Destruction of data containing personal information required; violation as misdemeanor; fine; compliance; "destroy" defined. Sec. 12a. (1) Subject to subsection (3), a person or agency that maintains a database that includes personal information regarding multiple individuals shall destroy any data that contain personal information concerning an individual when that data is removed from the database and the person or agency is not retaining the data elsewhere for another purpose not prohibited by state or federal law. This subsection does not prohibit a person or agency from retaining data that contain personal information for purposes of an investigation, audit, or internal review. (2) A person who knowingly violates this section is guilty of a misdemeanor punishable by a fine of not more than $250.00 for each violation. This subsection does not affect the availability of any civil remedy for a violation of state or federal law. (3) A person or agency is considered to be in compliance with this section if the person or agency is subject to federal law concerning the disposal of records containing personal identifying information and the person or agency is in compliance with that federal law. (4) As used in this section, "destroy" means to destroy or arrange for the destruction of data by shredding, erasing, or otherwise modifying the data so that they cannot be read, deciphered, or reconstructed through generally available means.