Skip to content
Georgia Commons
Menu

Official Code of Georgia Annotated

Title 10. COMMERCE AND TRADE · Chapter 15. BUSINESS ADMINISTRATION

10-15-2. Disposal of business records containing personal information.

Active

Current through: Including Acts of the 2025 Regular Session of the General Assembly.

  1. A business may not discard a record containing personal information unless it:

  2. (1)

    Shreds the customer’s record before discarding the record;#

  3. (2)

    Erases the personal information contained in the customer’s record before discarding the record;#

  4. (3)

    Modifies the customer’s record to make the personal information unreadable before discarding the record; or#

  5. (4)

    Takes actions that it reasonably believes will ensure that no unauthorized person will have access to the personal information contained in the customer’s record for the period between the record’s disposal and the record’s destruction.#

The notes below are printed with the section but are not enacted law (O.C.G.A. § 1-1-1(c)). They are shown apart from the text.

History

Code 1981, § 10-15-2, enacted by Ga. L. 2002, p. 551, § 8; Ga. L. 2015, p. 1088, § 11/SB 148.

Law reviews

For article, “The Growing Threat of Identity Theft and Its Implications for Employers,” see 11 Ga. St. B. J. 27 (2006).

Read the official page (the state's PDF, opened at the page this text was read from).

Current through: Including Acts of the 2025 Regular Session of the General Assembly.

Text read from t10-(v8)-2024-pdf.pdf, Volume V8, 2024 edition, page 1413; merge action: carried; file SHA-256 7afbade16da7.