MO HB1857

Requires any business conducting business in Missouri or maintaining personal information of Missouri residents to take reasonable measures to protect against unauthorized access to personal information during disposal.

Defines "personal information" as Social Security numbers, identification numbers, passwords, driver's licenses, passport numbers, biometric information, financial account numbers, and health information.

Mandates businesses implement policies requiring burning, pulverizing, or shredding of papers and destruction or erasure of electronic media containing personal information so it cannot be reconstructed.

Requires businesses to document disposal procedures in official written policies including corporate and employee handbooks.

Establishes civil penalties of up to $3,000 for violations and allows individuals to sue for injunctions, actual damages, costs, and reasonable attorney's fees.