Shredding News & Resources

The California Consumer Privacy Act (CCPA) and its successor, the California Privacy Rights Act (CPRA), are among the most influential consumer privacy laws in the United States. While these laws are California statutes, their reach extends far beyond state borders — any business, regardless of location, that meets certain thresholds and handles personal information of […]

Every business in New York — from a solo medical practice in Westchester to a multi-location law firm in Manhattan — generates records that have legal, financial, or regulatory significance. Knowing how long to keep those records, and when to destroy them, is one of the most important but frequently overlooked aspects of business operations.

Investment advisers, hedge funds, private equity firms, and other asset managers registered with the Securities and Exchange Commission are subject to some of the most rigorous document retention and destruction requirements in the financial services industry. SEC compliance shredding for New York investment advisers is a multi-faceted obligation that spans paper records, electronic communications, and

The Financial Industry Regulatory Authority (FINRA) is the self-regulatory organization that oversees broker-dealers in the United States, and its rules impose some of the most detailed and demanding document retention and destruction requirements in any industry. For broker-dealers operating in New York — from boutique investment firms in Manhattan’s Financial District to regional broker-dealers serving

The Family Educational Rights and Privacy Act (FERPA) is the federal law that protects the privacy of student education records. Schools and educational institutions that receive federal funding — which includes virtually every public school, college, and university in New York — must comply with FERPA’s requirements for protecting and properly disposing of student records.

Any business in New York that accepts credit cards, debit cards, or other payment cards is subject to the Payment Card Industry Data Security Standard — commonly known as PCI DSS. While much of the standard focuses on digital security, PCI DSS also establishes clear requirements for the physical protection and secure disposal of cardholder

The Sarbanes-Oxley Act of 2002 — commonly known as SOX — established sweeping requirements for corporate financial transparency and internal controls at publicly traded companies. While much of the law’s focus is on financial reporting and auditor independence, SOX also imposes serious obligations around document retention and destruction. For public companies headquartered in New York

The New York SHIELD Act — Stop Hacks and Improve Electronic Data Security — significantly expanded the data protection obligations of businesses that hold private information about New York residents. Signed into law in 2019 and fully effective since March 2020, the SHIELD Act requires businesses of all sizes to implement reasonable data security practices

Management consulting, strategy advisory, and professional services firms in New York City operate in an environment where information is the product. Client engagements produce mountains of sensitive materials — from confidential due diligence reports and organizational assessments to financial models, NDA-protected strategies, and personnel evaluations. For consulting firms operating in Manhattan, Long Island, or Westchester,

PR and marketing agencies in New York City hold some of the most sensitive business information in any industry. From unreleased campaign strategies and competitor analysis reports to client contracts, pitch decks, and non-disclosure agreements, the volume of confidential documents that passes through a typical agency is staggering. For agencies serving high-profile brands in Manhattan,