---
title: O.C.G.A. § 10-15-2. Disposal of business records containing personal information.
collection: code
id: 10-15-2
cite_as: O.C.G.A. § 10-15-2 (2025)
canonical_url: https://georgiacommons.org/code/10-15-2
md_url: https://georgiacommons.org/code/10-15-2.md
text_url: https://georgiacommons.org/code/10-15-2/text
source_url: https://www.legis.ga.gov/api/document/docs/default-source/joint-features-document-library/t10-(v8)-2024-pdf.pdf?sfvrsn=1992b47e_0#page=1413
date: 2025
status: active
corpus_version: 2025-supplement-89aa39ab3c68
license: CC0-1.0
publisher: Georgia Commons, an independent project of Georgia Civic Data. Not the State of Georgia. Not legal advice.
up: https://georgiacommons.org/code/10-15.md
previous: https://georgiacommons.org/code/10-15-1.md
next: https://georgiacommons.org/code/10-15-3.md
index: https://georgiacommons.org/code/index.md
version: the only printed version
in_force: true
current_through: Including Acts of the 2025 Regular Session of the General Assembly
heading_path: COMMERCE AND TRADE / BUSINESS ADMINISTRATION
---

# O.C.G.A. § 10-15-2. Disposal of business records containing personal information.

A business may not discard a record containing personal information unless it:

(1) Shreds the customer’s record before discarding the record;

(2) Erases the personal information contained in the customer’s record before discarding the record;

(3) Modifies the customer’s record to make the personal information unreadable before discarding the record; or

(4) Takes actions that it reasonably believes will ensure that no unauthorized person will have access to the personal information contained in the customer’s record for the period between the record’s disposal and the record’s destruction.

## History

Code 1981, § 10-15-2, enacted by Ga. L. 2002, p. 551, § 8; Ga. L. 2015, p. 1088, § 11/SB 148.

## Law Reviews

For article, “The Growing Threat of Identity Theft and Its Implications for Employers,” see 11 Ga. St. B. J. 27 (2006).