Shredding News & Resources

The Sarbanes-Oxley Act of 2002 (SOX) transformed corporate governance and financial recordkeeping requirements for publicly traded companies in the United States. Among its most specific and consequential provisions are the requirements for audit firms and their clients to retain audit workpapers, financial records, and related documentation for defined periods — and the associated criminal penalties […]

The Fair Credit Reporting Act (FCRA) is one of the foundational federal consumer protection laws governing how consumer reports — credit reports, background checks, tenant screening reports, and similar documents — may be obtained, used, and ultimately disposed of. The FCRA’s Disposal Rule, established under the Fair and Accurate Credit Transactions Act (FACTA), places specific

Businesses that generate hazardous waste in New York — from manufacturing facilities in Queens to auto repair shops on Long Island and chemical laboratories throughout Westchester County — operate under a complex set of federal and state environmental regulations that include strict recordkeeping requirements. The U.S. Environmental Protection Agency (EPA) mandates that hazardous waste generators

For healthcare providers, managed care organizations, and social service agencies throughout New York State, Medicaid records represent some of the most sensitive and highly regulated documentation in existence. New York Medicaid — administered jointly by the New York State Department of Health and the federal Centers for Medicare & Medicaid Services (CMS) — imposes strict

The Occupational Safety and Health Administration (OSHA) requires employers throughout the United States — including the thousands of businesses operating in New York City, Long Island, and Westchester County — to maintain detailed records of workplace injuries and illnesses. These records, including OSHA 300 logs, 300A annual summaries, and 301 incident reports, must be retained

New York State’s Department of Financial Services (NYDFS) Cybersecurity Regulation — 23 NYCRR 500 — is one of the most comprehensive financial data security regulations in the United States. Originally focused on digital systems and electronic data, the regulation’s requirements for data disposal, access controls, and risk management also have direct implications for how regulated

The NIST Privacy Framework, released by the National Institute of Standards and Technology in 2020, provides organizations with a voluntary, risk-based approach to managing privacy risk across their operations. While the framework is primarily associated with digital data governance, its Core Functions — Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P — have direct implications for how

For technology companies, SaaS providers, and service organizations in New York City and across the metro area, SOC 2 (System and Organization Controls 2) audits have become a standard expectation for enterprise clients and business partners. While SOC 2 is often thought of as a cloud security framework, it encompasses far more than digital systems

For any business that processes credit card payments in New York City or across Long Island and Westchester, the Payment Card Industry Data Security Standard (PCI DSS) imposes strict requirements on how cardholder data is handled — and destroyed. While most businesses focus on digital security measures, paper receipts, transaction logs, and printed cardholder records

The Gramm-Leach-Bliley Act (GLBA) and its implementing regulations have undergone significant updates in recent years, with the FTC’s revised Safeguards Rule taking full effect in 2023 and ongoing enforcement activity making compliance more urgent than ever. For financial firms in New York City, Long Island, and Westchester County, understanding the latest GLBA disposal rule updates