HB 10-1056 Summary

• Public and private entities must shred paper documents or erase and render electronic records indecipherable before disposing of any materials containing personal identifying information.

• Each entity must develop a written policy for destruction or proper disposal of documents and records containing personal identifying information that includes the shredding or erasure requirements.

• Entities that violate the disposal requirements are subject to civil penalties up to $500 per document or record, with penalties paid to the state general fund.

• The Attorney General or district attorney may bring actions to recover penalties, obtain injunctive relief, and recover costs and attorney fees for violations.

• Entities that contract with recyclers or disposal firms are not required to verify that those firms properly destroy the documents or records.