DE HB295

Establishes Chapter 50C requiring commercial entities to safely destroy records containing consumers' personal identifying information by shredding, erasing, or otherwise rendering the information unreadable or indecipherable.

Defines "personal identifying information" as a consumer's name combined with social security number, passport number, driver's license, insurance policy number, financial account numbers, credit/debit card numbers, tax/payroll information, or confidential health care information.

Allows consumers to bring civil actions against commercial entities for actual damages resulting from reckless or intentional violations of the safe destruction requirements.

Exempts financial institutions regulated under Gramm-Leach-Bliley Act, health insurers and facilities complying with HIPAA standards, consumer report agencies subject to the Federal Credit Reporting Act, and government entities.

Takes effect January 1, 2015.