Fair Credit Reporting: 16 C.F.R. § 682.3 Proper disposal of consumer information.
(a) Standard. Any person who maintains or otherwise possesses consumer information for a business purpose must properly dispose of such information by taking reasonable measures to protect against unauthorized access to or use of the information in connection with its disposal.