Uncategorized

When setting up a document security program for your New York office, one of the first decisions you’ll face is how to collect sensitive documents before they are shredded. Two common options—shredding consoles and shredding bins—may sound similar but serve meaningfully different purposes and offer very different levels of security. Understanding the shredding console vs […]

Running a well-organized document destruction program is one of the best things a New York business can do for its data security posture. But what happens when the company receives a litigation threat, a regulatory subpoena, or a notice of government investigation? At that moment, all routine shredding must stop for the relevant documents—and the

Biometric data—fingerprints, facial geometry, iris scans, hand geometry, voiceprints—is uniquely sensitive personal information for one fundamental reason: it cannot be changed. If your Social Security number is compromised, you can request a new one. If your password is stolen, you can create another. But if your fingerprint data is exposed in a breach, that compromise

When most people think about the Children’s Online Privacy Protection Act (COPPA), they think of website cookie consent banners and app permissions for children under 13. What’s less widely understood is that COPPA’s data minimization and deletion requirements extend to all forms of personal information collected about children—including the printed records that youth-serving organizations in

Most business owners are familiar with HIPAA, FCRA, and even GLBA as they apply to their data disposal obligations. Far fewer are aware of the Driver’s Privacy Protection Act (DPPA)—a federal law that restricts access to, use of, and ultimately disposal of motor vehicle records obtained from state DMV databases. For New York businesses in

When your company conducts background checks on job applicants or current employees, you receive consumer reports containing some of the most sensitive personal information imaginable—credit history, criminal records, employment verification, and in some cases Social Security numbers and financial account details. Federal law under the Fair Credit Reporting Act (FCRA) doesn’t just regulate how you

Every business owner knows that taxes come with paperwork—but how long do you actually need to keep those records, and when can you safely destroy them? For New York businesses navigating federal tax obligations, IRS Publication 583 record destruction guidelines provide the foundational framework for understanding when documents can be securely shredded without risking an

New York’s not-for-profit organizations — from neighborhood community groups to large regional hospitals and educational institutions — are subject to a distinct set of records retention requirements that reflect their unique governance structure, regulatory environment, and accountability obligations. New York nonprofit records retention requirements under the Not-for-Profit Corporation Law (N-PCL), the Internal Revenue Code, and

New York employers face some of the most comprehensive labor law record retention requirements in the United States. Under a combination of federal and New York state laws, businesses must retain payroll records, personnel files, wage and hour documentation, and other employment-related records for periods that range from one year to six or more years.

FINRA member firms — broker-dealers, investment firms, and associated registered representatives — operate under one of the most detailed records retention frameworks in the financial services industry. Before a firm can legally shred paper files, compliance officers and records managers must confirm that the records have been held for the full required retention period, that