Most New York business owners have heard of the Fair Credit Reporting Act (FCRA), but fewer are aware of one of its most important provisions for everyday business operations: the FACTA Disposal Rule. Enacted as part of the Fair and Accurate Credit Transactions Act (FACTA) of 2003, this federal rule imposes specific legal obligations on businesses regarding how they dispose of consumer report information — and the penalties for non-compliance can be severe. If your New York business ever pulls a credit report, runs a background check, or receives any information derived from a consumer report, the FACTA Disposal Rule applies to you.
Understanding and complying with the FACTA Disposal Rule doesn’t have to be complicated. This guide explains exactly what the rule requires, who it applies to, what happens when businesses fail to comply, and how certified document shredding protects New York businesses from FACTA liability.
What Is the FACTA Disposal Rule?
The FACTA Disposal Rule (officially the Disposal of Consumer Report Information and Records Rule, 16 C.F.R. Part 682) requires any person or business that maintains or possesses consumer report information for a business purpose to properly dispose of that information when it is no longer needed. The rule was issued jointly by the FTC and multiple financial regulatory agencies.
The rule applies to information from consumer reports — but also to information derived from consumer reports. This means:
- Credit reports pulled on job applicants or current employees
- Background checks that include credit history
- Tenant screening reports for landlords
- Vendor due diligence reports that include financial information
- Any document, form, or file that contains information originally drawn from a consumer reporting agency
If you’re unsure whether your business is covered, the answer is almost certainly yes. Nearly every business that hires employees, rents property, or extends credit to customers has used consumer report information at some point. Learn more about compliance requirements for New York businesses.
What Does the FACTA Disposal Rule Require?
The rule requires that consumer report information be disposed of in a way that protects against unauthorized access or use. The FTC’s guidance specifies that “reasonable measures” include:
- Burning, pulverizing, or shredding paper documents containing consumer report information so the information cannot be read or reconstructed
- Destroying or erasing electronic media containing consumer report information so the information cannot be read or reconstructed
- Entering into a contract with a certified document destruction company that will dispose of the information in a manner consistent with the rule
Critically, simply throwing consumer report documents in the trash — even shredded into large pieces — does not comply. The rule requires that information be rendered unreadable and unreconstruable. Cross-cut or micro-cut shredding by a certified shredding company is the standard approach that satisfies this requirement for paper documents.
FCRA FACTA Compliance: Who Enforces the Rule?
The FACTA Disposal Rule is enforced by multiple agencies depending on the type of business:
- Federal Trade Commission (FTC) — Most businesses, including retailers, landlords, and non-financial companies
- Consumer Financial Protection Bureau (CFPB) — Larger financial institutions and mortgage servicers
- Federal banking regulators — Banks, credit unions, and thrifts
- SEC and CFTC — Securities and commodity brokers and dealers
- State attorneys general — Including the New York Attorney General, who has authority to bring FCRA enforcement actions on behalf of New York residents
Penalties for violations include:
- Civil penalties of up to $3,756 per violation (adjusted for inflation)
- Actual damages suffered by affected consumers
- Statutory damages of $100 to $1,000 per individual violation in class actions
- Punitive damages in cases of willful violations
- Attorney’s fees and costs
Common FACTA Compliance Failures in New York Businesses
New York businesses fail to comply with the FACTA Disposal Rule in predictable ways. Understanding these failure points helps you build better processes:
- Throwing resumes and job applications in the trash — If a resume includes authorization for a background check or is attached to consumer report results, it must be securely shredded
- Recycling credit applications — Even rejected credit applications that were accompanied by consumer report pulls must be shredded, not just recycled
- Leaving background check printouts in files indefinitely — Consumer report information should be retained only as long as legally required, then shredded
- Disposing of old computers without destroying data — Hard drives containing consumer report information from your applicant tracking or HR systems must be physically destroyed
- Relying on office shredders — Strip-cut office shredders may not meet the “unreconstruable” standard; cross-cut or micro-cut shredding is recommended
The solution to all of these failures is the same: establish a relationship with a certified shredding company like New York Shredding that provides locked consoles for secure collection and certified destruction with documentation. See our services page for options that fit businesses of every size.
Building a FACTA-Compliant Disposal Program for Your New York Business
Achieving FACTA compliance shredding for your New York business requires a systematic approach rather than ad hoc document disposal. Here’s how to build a compliant program:
- Identify consumer report information in your business — Audit your HR, credit, and tenant files to identify where consumer report information lives
- Establish retention schedules — Consult with legal counsel to determine how long you must retain consumer report information for your specific business type and use
- Deploy locked collection consoles — Place locked shredding consoles in HR, credit, and other areas where consumer report information is handled
- Partner with a certified shredding company — Contract with a NAID-certified shredding company that provides Certificates of Destruction
- Document your compliance — Maintain Certificates of Destruction and your disposal policy as evidence of compliance
- Address electronic data — Include hard drives, servers, and backup media containing consumer report data in your destruction program
Contact New York Shredding to set up a FACTA-compliant disposal program for your New York City, Long Island, or Westchester business. Our service area covers all five boroughs and surrounding communities.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.