2019 Code of Alabama
Title 8 - Commercial Law and Consumer Protection.
Chapter 38 - Data Breach Notification Act of 2018.
Section 8-38-10 - Disposal of records containing sensitive personally identifying information.

Universal Citation: AL Code § 8-38-10 (2019)
Section 8-38-10Disposal of records containing sensitive personally identifying information.

A covered entity or third-party agent shall take reasonable measures to dispose, or arrange for the disposal, of records containing sensitive personally identifying information within its custody or control when the records are no longer to be retained pursuant to applicable law, regulations, or business needs. Disposal shall include shredding, erasing, or otherwise modifying the personal information in the records to make it unreadable or undecipherable through any reasonable means consistent with industry standards.

(Act 2018-396, §10.)
Disclaimer: These codes may not be the most recent version. Alabama may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.