It's important to follow the regulations set out by the FTC pursuant to FCRA Section 628 when it comes to disposing of all consumer information. Paper and electronic reports must be destroyed so it cannot be read or reconstructured. Employers need to show due diligence when a shredding firm is hired. For more information go to: http://www.ftc.gov/os/2004/11/041118disposalfrn.pdfFor best practices when it comes to protecting privacy in the workplace and for best practices when it comes to handling documents that contain PII, see the recommendations from the Privacy Rights Clearinghouse available at: www.privacyrights.org/ar/SDCountyIT.htm
