South Carolina § 37-20-190 Requirements for disposition of business records; exceptions.

South Carolina Statutes

§ 37-20-190 — Requirements for disposition of business records; exceptions.

South Carolina § 37-20-190

Title 37CONSUMER PROTECTION CODE

Ch. 20CONSUMER IDENTITY THEFT PROTECTION

This text of South Carolina § 37-20-190 (Requirements for disposition of business records; exceptions.) is published on Counsel Stack Legal Research, covering South Carolina primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

S.C. Code Ann. § 37-20-190 (2026).

Text

(A)When a business disposes of a business record that contains personal identifying information of a customer of a business, the business shall modify, by shredding, erasing, or other means, the personal identifying information to make it unreadable or undecipherable.

(B)A business is considered to comply with subsection (A) if it contracts with a person engaged in the business of disposing of records for the modification of personal identifying information on behalf of the business in accordance with subsection (A).

(C)This section does not apply to:

(1)a bank or financial institution that is subject to and in compliance with the privacy and security provision of the Gramm-Leach-Bliley Act;

(2)a health insurer that is subject to and in compliance with the standards for privacy of ind

Free access — add to your briefcase to read the full text and ask questions with AI

(A) When a business disposes of a business record that contains personal identifying information of a customer of a business, the business shall modify, by shredding, erasing, or other means, the personal identifying information to make it unreadable or undecipherable. (B) A business is considered to comply with subsection (A) if it contracts with a person engaged in the business of disposing of records for the modification of personal identifying information on behalf of the business in accordance with subsection (A). (C) This section does not apply to: (1) a bank or financial institution that is subject to and in compliance with the privacy and security provision of the Gramm-Leach-Bliley Act; (2) a health insurer that is subject to and in compliance with the standards for privacy of individually identifiable health information and the security standards for the protection of electronic health information of the Health Insurance Portability and Accountability Act of 1996; or (3) a consumer credit-reporting agency that is subject to and in compliance with the federal Fair Credit Reporting Act.