Category: FACTA

The Fair and Accurate Credit Transactions Act (FACTA), enacted in 2003 as an amendment to the Fair Credit Reporting Act (FCRA), is a significant piece of U.S. legislation designed to enhance consumer protections in the realm of credit and financial transactions. FACTA aims to reduce the risk of identity theft and fraud, improve the accuracy of consumer records, and allow consumers to exercise greater control over the personal financial information that is collected and processed by credit reporting agencies.

One of the hallmark features of FACTA is its provisions for combating identity theft. It grants consumers the right to request and obtain a free copy of their credit report annually from each of the three major credit reporting agencies. This access enables consumers to monitor their credit files for any suspicious activity. Furthermore, FACTA introduced measures such as fraud alerts, which consumers can place on their credit reports to notify potential creditors to take extra steps to verify their identity before extending credit. For victims of identity theft, the Act provides additional protections, including the ability to block fraudulent information from appearing on their credit reports.

Additionally, FACTA addresses the accuracy of consumer information and the responsibilities of creditors and credit bureaus in rectifying errors. It requires that information furnishers follow reasonable procedures to ensure the accuracy and integrity of consumer information provided to credit reporting agencies. In cases of disputes regarding the accuracy of credit report information, FACTA mandates an expedited process for corrections, ensuring that errors are promptly investigated and rectified.

FACTA also includes provisions related to the secure disposal of consumer information, which is particularly relevant for businesses. It requires that any business that uses consumer reports must dispose of them in a secure manner, such as through shredding or other means, to prevent unauthorized access and use of sensitive personal information.

In summary, the Fair and Accurate Credit Transactions Act represents a critical advancement in consumer protection laws related to credit and financial transactions. By providing mechanisms for identity theft prevention, ensuring the accuracy of credit-related information, and mandating secure disposal of consumer data, FACTA plays a pivotal role in safeguarding consumer rights and enhancing the integrity of the credit reporting system.

The Importance of a Clean Desk Policy

Just following a clean desk policy protects your organization’s sensitive information, reduces risk of insider theft, and helps ensure compliance with privacy laws; it also boosts productivity by cutting time lost to searches and supports hot-desking and green initiatives. Adopt clear procedures for locking screens, clearing paperwork, and securely shredding documents to make information security part of your daily routine.

Understanding Clean Desk Policies

Definition and Purpose

You should treat a clean desk policy as a practical set of rules that requires you to remove visible sensitive information when you step away or leave for the day – lock screens, file documents in secure drawers, and shred unneeded papers. It aims to reduce the insider and opportunistic risks highlighted by IBM’s report, showing insider-initiated breaches average nearly $5 million in cost, while also supporting regulatory compliance and efficient hot-desking.

Key Components

Core elements you should expect include physical controls (lockable storage, secure mail bins, on-site shredding), digital safeguards (auto-lock, multi-factor authentication, screen privacy filters), behavioral rules (end-of-day checklist, no sticky-note passwords), training (annual or role-based sessions), and monitoring (quarterly audits and spot checks) so that responsibilities and enforcement are clear across teams and sites.

For example, implementing a five-minute auto-lock, daily end-of-day checks, and accessible shredding bins directly addresses the four hours-per-week lost to searching for misplaced items cited by Corporate Vision; you’ll also reduce exposure during meetings or desk swaps by enforcing locked storage and documented disposal procedures that make compliance measurable and auditable.

Types of Clean Desk Policies

You’ll see five common approaches: strict, flexible, hybrid, role-based, and industry-specific policies, each balancing security, productivity, and culture. Organizations choose based on risk tolerance, regulatory demands, and workspace models like hot-desking; for example, finance and healthcare often favor stricter controls because insider threat incidents cost organizations nearly $5 million on average when breaches involve malicious insiders.

Strict	Require clearing all papers, locking screens, and storing devices; enforced with audits and disciplinary measures.
Flexible	Allow staff discretion during the day with mandatory end-of-day cleanup; suits creative teams and lower-risk roles.
Hybrid	Combine strict end-of-day rules with daytime flexibility; useful for mixed-use offices and hot-desking setups.
Role-based	Different requirements by job function-e.g., legal, HR, and finance face tighter controls than reception or facilities.
Industry-specific	Tailored to regulations like HIPAA, GLBA, and SOX, specifying retention, shredding, and access controls for protected records.

Setting clear metrics for compliance-spot audits, weekly checklists, and monthly reporting helps enforce behavior.
Provide tools such as lockable storage, secure shredders, and automatic screen locks to make compliance practical.
Assume that you must document exceptions, train staff annually, and track improvements to show regulators you’re managing risk.

Strict vs. Flexible Policies

You’ll find strict policies mandate zero paper left out and immediate device locking, often paired with audits; many banks and large healthcare providers use these to meet GLBA or HIPAA expectations. Flexible policies let you keep working materials visible during tasks and only require cleanup at day’s end, which can boost creativity but raises exposure unless you pair it with targeted controls.

Industry-Specific Policies

You must align your clean desk rules with sector rules: HIPAA demands safeguards for PHI, GLBA governs financial records, and SOX affects corporate document retention. Tailoring policies reduces regulatory risk while keeping daily routines realistic for employees in high-compliance roles.

More granularly, you should map records to retention schedules, require locked storage for regulated documents, and mandate certified shredding for disposal; HIPAA penalties range up to $1.5 million per year for violations, so documenting training, access logs, and disposal chains of custody is a practical way to demonstrate compliance during audits.

Benefits of Implementing a Clean Desk Policy

Beyond appearances, implementing a clean desk policy delivers measurable security, productivity, and compliance gains: the Association of Certified Fraud Examiners’ 2024 report shows most fraudsters were employees or managers, IBM’s Cost of a Data Breach Report cites insider-initiated breaches averaging nearly $5 million in cost, and Corporate Vision estimates employees can lose up to four hours weekly searching for misplaced items-each of which your policy helps prevent.

Enhanced Office Security

By enforcing locked storage, mandatory screen locks, and end-of-day clearing, you reduce exposure of sensitive documents to passersby and malicious insiders; the ACFE 2024 data on internal fraud and IBM’s $5M average insider breach cost illustrate how even one exposed document can translate to severe financial and reputational loss, so combining physical controls with secure shredding closes common attack vectors.

Increased Employee Productivity

When you eliminate paper clutter and adopt consistent filing and digital practices, employees stop wasting up to four hours per week searching for items, as Corporate Vision reports, which directly improves billable time and reduces task-switching. Consistent routines and clear storage rules also speed onboarding and make collaboration smoother across teams.

Implement practical habits-2-5 minute end-of-day clearings, labeled inbox/outbox trays, searchable digital naming conventions, and scheduled weekly purges-and you can convert small daily investments into measurable returns; for example, reclaiming even one hour per employee weekly across a 50-person team yields roughly 2,600 productive hours annually.

Tips for Effectively Maintaining a Clean Desk

Schedule a daily 5-minute sweep to file, shred, and clear surfaces; lock screens and secure mobile devices whenever you leave; limit papers on your desktop to active items only to cut the four hours-per-week wasted searching cited by Corporate Vision; set auto-lock to 5 minutes and route confidential waste to locked bins or scheduled shredding. Recognizing these small, consistent actions reduces insider-exposure risk and recovers productive hours across your team.

Do a 5-minute end-of-day sweep: file, shred, wipe down surfaces.
Enable auto-lock after 5 minutes and use privacy screens on monitors.
Adopt a “one in, one out” paper rule and limit desktop files to 10 items.
Use labeled trays and color-coded folders for immediate sorting.
Schedule weekly secure shredding or locked bins for PII and sensitive documents.

Daily Cleaning Routine

You should build a predictable end-of-day checklist: clear loose papers into labeled trays or locked drawers, scan or file invoices into your digital system, place any sensitive notes in a shred bin, wipe keyboards and touchpoints, and verify devices are locked; a focused 5-minute routine at 4:55 p.m. prevents overnight exposure and keeps the 5 p.m. clearing expectation consistent across teams.

Organizing Digital and Physical Files

Use consistent naming conventions like YYYYMMDD_Client_DocType and the 3-2-1 backup rule (three copies, two media types, one offsite) for digital records; keep physical files to active items only and store older records in labeled, locked cabinets with retention dates visible; limit desktop shortcuts to under 10 and archive monthly to reduce clutter and speed retrieval.

For more detail, create a folder structure example (Finance/2025/Invoices or Projects/ClientName/2025) and enforce version control with “_v1, _v2” suffixes; scan paper at 300 dpi and index with OCR so you can search PDFs quickly. Implement a weekly purge for non-necessary printouts and an immediate-shred policy for documents containing PII, while logging destroyed items to maintain an audit trail and support compliance efforts.

Step-by-Step Guide to Implementing a Clean Desk Policy

Assess Risks	Map where sensitive data appears-workstations, printers, meeting rooms-and quantify exposure: track the top 5 document types that leave desks and record baseline incident counts for 30 days to focus controls.
Draft Policy	Define scope, classification tiers (e.g., Public, Internal, Confidential), required actions (clear desks at 5 p.m., lock screens after 5 minutes), permitted exceptions, and retention rules aligned with HIPAA, SOX, or GLBA where applicable.
Assign Roles	Designate owners, security, HR, and facilities, with clear accountability: appoint desk-audit leads and set targets such as 95% compliance within 90 days of launch.
Provide Tools	Supply lockable storage, secure shredders, privacy screens, and single sign-on with automatic lockouts; implement centralized document repositories to reduce paper by measurable percentages.
Train & Launch	Deliver role-based training prior to rollout, run a 30-day pilot with weekly desk audits, and use signage and desk tags to reinforce behavior.
Monitor & Enforce	Perform monthly audits, publish compliance scores, escalate repeat violations through HR, and iterate policy after quarterly reviews using audit data and employee feedback.

Developing the Policy

You should write a concise policy that sets clear expectations: classify documents into three levels, require a clear desk at the end of the shift and screen locks after five minutes, specify approved storage and shredding procedures, and list exceptions (e.g., active case files in locked cabinets). Use measurable targets, like reducing visible paper by 50% in 60 days, and reference applicable regulations such as HIPAA, SOX, or GLBA to align compliance obligations with daily practices.

Training Employees

You need a phased training program: a 15-minute onboarding module, role-based 30-minute sessions for high-risk teams, and quarterly 10-minute refreshers. Set a 90% completion target within the first 60 days, test understanding with short quizzes, and include practical checklists so staff can apply rules at once.

You should supplement e-learning with hands-on exercises: run simulated desk audits, show before-and-after desk photos, and stage tabletop exercises where employees identify sensitive items and choose proper disposal methods. Track KPIs-audit pass rate, training completion, and incident reductions-and use those metrics to adjust cadence, communications, and enforcement; include access to secure shredding services and clear escalation paths for policy breaches.

Factors to Consider

When shaping your clean desk policy, evaluate these operational and risk drivers:

Data sensitivity: PHI, PII, financial records
Office layout: open plan, hot-desking
Work patterns: hybrid, remote, shift turnover
Regulatory scope: HIPAA, GLBA, SOX, FACTA
Disposal: scheduled shredding, locked bins
Training & enforcement: frequency, audits

Perceiving how these variables intersect helps you prioritize training, storage, and shredding frequency to reduce insider risk and compliance gaps.

Company Culture

If your team prizes flexibility, tailor the policy to support hot-desking and creative workflows while protecting PHI and financial data; require locked drawers, clear-desk checks, and end-of-day scanning. Leadership should model the behavior, and you can link compliance to productivity; unorganized desks can cost employees up to four hours weekly in lost time.

Industry Regulations

Because you may handle PHI, financial records, or tax-related data, align your clean desk rules with HIPAA, GLBA, SOX, and FATCA; noncompliance can trigger audits, fines, and mandatory breach reporting. Map retention windows and access controls to each statute, and require documented shredding for regulated materials.

Dig deeper into each regime: HIPAA mandates administrative, physical, and technical safeguards for ePHI and audit trails; GLBA and FTC disposal guidance require secure destruction of consumer financial records; SOX commonly requires retaining certain financial and audit documents for seven years, so time your shredding to respect statutory retention periods.

Pros and Cons of Clean Desk Policies

Pros	Cons
Enhanced information security – reduces visible sensitive documents (ACFE 2024: most fraudsters were employees)	Employee resistance – may be perceived as surveillance or micromanagement
Lower breach exposure – helps limit insider risk (IBM: malicious insider breaches cost nearly $5M on average)	Transition productivity hit – time spent clearing and organizing at day’s end
Improved regulatory compliance – supports HIPAA, SOX, GLBA, and related requirements	Implementation and training costs – resources needed for rollout and enforcement
Time savings locating materials – reduces wasted search time (Corporate Vision: up to 4 hours/week)	Over-reliance on digital files – access problems during outages or system failures
Enables hot-desking – simplifies shared workspace logistics	Potential impact on creativity – some roles perform better with visible notes
Better professional appearance – positive impression for clients and visitors	Privacy concerns – workers may dislike removing personal items
Reduces paper waste – aligns with green office initiatives	Need for secure disposal – requires shredding services and secure bins
Raises security awareness – reinforces daily secure habits across staff	Enforcement challenges – inconsistent compliance across teams and shifts

Advantages

You get tangible risk reduction and operational gains: cleaner desks limit visual data leakage, boost compliance with laws like HIPAA and SOX, and recover time lost to clutter – Corporate Vision estimates up to four hours per week – while reducing exposure to costly insider breaches (IBM reports nearly $5M average for malicious-insider incidents).

Disadvantages

You may face pushback and upfront costs: employees often view clean-desk mandates as intrusive, training and monitoring require budget and time, and some roles sacrifice creativity when every note or sketch must be stowed each day.

You can mitigate these drawbacks by using phased rollouts, role-based exceptions, and clear retention rules; invest in secure shredding infrastructure and concise training so your team understands why policies exist and how audits will be conducted, which lowers resistance and improves consistent adherence.

Conclusion

On the whole, adopting a clean desk policy protects your sensitive data, reduces the risk of insider and external breaches, improves compliance and productivity, and supports greener operations; implementing it alongside secure services like Country Mile Document Destruction® ensures your confidential materials are handled and destroyed safely.

Related Blog Posts

January 13, 2026

FACTA Compliance: Enhancing Security with Mobile Data Destruction Services
In an age where personal and financial information is at risk of falling into the wrong hands, the Fair and Accurate Credit Transactions Act (FACTA) stands as a crucial safeguard. FACTA, enacted to protect consumer credit information, includes stringent regulations on secure data disposal. In this blog post, we will delve into why FACTA compliance is essential and how hiring a mobile data destruction service can significantly enhance your shredding process.

Understanding FACTA

FACTA, in Brief: FACTA was signed into law in 2003 with the primary goal of protecting consumers from identity theft and ensuring the accuracy of credit reports.

Protected Information: Under FACTA, sensitive information includes consumer credit reports and any documents derived from them.

The Significance of FACTA Compliance

Complying with FACTA is not just a legal requirement; it’s about safeguarding consumers’ financial well-being and maintaining trust. Here’s why FACTA compliance is crucial:

1. Identity Theft Prevention

FACTA’s provisions are designed to prevent identity theft by ensuring the secure disposal of consumer credit information.

2. Legal Consequences

Non-compliance with FACTA can lead to severe penalties, including fines. It’s not a risk worth taking.

3. Protection of Reputation

In today’s data-driven world, a data breach resulting from improper disposal can tarnish a business’s reputation, leading to a loss of customers and revenue.

The Role of Mobile Data Destruction Services

Mobile data destruction services play a pivotal role in FACTA compliance. Here’s why they are indispensable:

1. On-Site Convenience

Mobile data destruction services bring the shredding process to your location, ensuring that documents are securely destroyed on-site.

2. Immediate Destruction

With mobile services, there’s no delay between document collection and shredding, reducing the risk of data exposure.

3. Witnessed Destruction

Mobile shredding offers witnessed destruction, allowing you to oversee the process and gain peace of mind knowing your documents are securely destroyed. Some data destruction companies like Country Mile Document Destruction provide you with a certificate of destruction that you can use in a court of law.

4. Compliance Expertise

Mobile data destruction companies are well-versed in FACTA compliance, ensuring that your shredding processes align with the regulations.

Best Practices for FACTA Data Destruction

To ensure compliance and protect consumer data, follow these best practices for FACTA data destruction:
1. Scheduled Shredding: Implement a regular schedule for data destruction to prevent the accumulation of sensitive information.
2. Secure Storage: Store documents containing consumer credit information in locked containers until they can be shredded to prevent unauthorized access.
3. Documented Procedures: Maintain records of your data destruction activities, including dates, quantities shredded, and witness signatures.
4. Employee Training: Ensure that your staff is trained on FACTA compliance and the importance of secure data disposal.
5. Mobile Data Destruction Service: Consider hiring a reputable mobile data destruction service provider to simplify and enhance your data shredding process. Click to read more about Mobile Destruction Services.
In Conclusion

FACTA compliance is not optional, especially for businesses that handle consumer credit information. It’s not just about adhering to the law; it’s about protecting consumers’ financial well-being and your business’s reputation. Hiring a mobile data destruction service can streamline the secure shredding process, ensuring that you meet FACTA requirements while also enhancing the security of your operations. Invest in secure data destruction to safeguard your business and the sensitive information entrusted to you by consumers.

The data destruction company that you use should be NAID-Certified.

This article originally was published at Country Mile Document Destruction.

Related Blog Posts
September 8, 2023
Data and Paper Destruction Laws
Data and paper destruction is a critical aspect of safeguarding sensitive information in the digital age. As a business owner, staying compliant with relevant laws is crucial. Here are some important laws related to the importance of data and paper destruction:

1. HIPAA (Health Insurance Portability and Accountability Act)
- Purpose: HIPAA regulates the protection of healthcare data and personal health information (PHI).
- Relevance: If your business deals with healthcare clients or their data, HIPAA mandates secure disposal methods to prevent data breaches.
- Source: HIPAA Overview
2. GLBA (Gramm-Leach-Bliley Act)
- Purpose: GLBA focuses on safeguarding consumer financial information held by financial institutions.
- Relevance: If your clients include financial institutions or deal with financial data, you must comply with GLBA regulations regarding secure disposal.
- Source: GLBA Compliance
3. FACTA (Fair and Accurate Credit Transactions Act)
- Purpose: FACTA addresses the protection of consumer credit information.
- Relevance: If your business handles consumer credit reports, FACTA requires secure disposal of sensitive data.
- Source: FACTA Guidelines
4. GDPR (General Data Protection Regulation)
- Purpose: GDPR protects the personal data of European Union residents.
- Relevance: Even if your business is based in the U.S., if you process data of EU residents, GDPR compliance mandates secure data disposal.
- Source: GDPR Overview
5. State Data Breach Laws
- Purpose: Various U.S. states have their own data breach notification laws.
- Relevance: Depending on your location and client base, you may need to adhere to specific state laws governing data breach notifications and secure data disposal.
- Source: State Data Breach Notification Laws
6. Sarbanes-Oxley Act (SOX)
- Purpose: SOX mandates financial transparency and accountability in publicly traded companies.
- Relevance: If your clients include publicly traded companies, you may need to comply with SOX requirements for secure document disposal.
- Source: SOX Overview
7. E-Waste Disposal Laws
- Purpose: Laws governing electronic waste disposal vary by state and locality.
- Relevance: Proper disposal of electronic devices containing sensitive data is essential to prevent data exposure and environmental harm.
- Source: Check your local and state environmental agencies for specific e-waste disposal regulations.
Always consult legal counsel or regulatory authorities to ensure your business’s compliance with these laws, as they may evolve over time. Proper data and paper destruction practices are essential for protecting your clients’ information and maintaining your business’s reputation.

This article originally was published at Country Mile Document Destruction.

Related Blog Posts
September 8, 2023
Why It Can Be Against The Law If You Don’t Destroy Your Documents Correctly
Shredding Services by Country Mile Document Destruction

Safely destroying your sensitive documents will help prevent lawsuits, give you peace of mind, and protect your identity. But did you know that if you don’t do it in certain circumstances you would be breaking the law?

Circumstances Where Document Destruction and Retention is Required by Law

Medical

In 1996 the federal government passed the Health Insurance Portability and Accountability Act (HIPPA) so that businesses have safeguards in place. If these rules are not followed you could face a hefty fine. – https://www.cdc.gov/phlp/publications/topic/hipaa.html

You can read more information about HIPAA here.

Sensitive Information on your Hard Drive

In 1984 the federal government passed the Computer Fraud and Abuse Act (CFAA) regulating how businesses deal with sensitive data. Information that has been deleted from your hard drive can still be accessed using special software. The hard drive’s platters have to be destroyed to make the data on it unreadable in order for your data to be securely destroyed. – https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/01/14/ccmanual.pdf

You can read more about the CFAA here.

Financial Documents

The Gramm-Leach-Bliley Act (GLBA) was passed by the federal government to set up restrictions and guidelines in place that govern how financial institutions dispose of and handle their data. – https://www.ftc.gov/tips-advice/business-center/privacy-and-security/gramm-leach-bliley-act

You can read more about the GLBA here.

Legal Documents

32 states and Puerto Rico have laws in place that protect identifying information collected by law firms, other businesses, and government entities that have to follow a special guideline on how information is stored, how long you have to store it, and how to destroy documents in paper or digital form. The information stored on such files has to be made unreadable or undecipherable according to the National Conference of State Legislators. In New York, N.Y. Gen. Bus. Law § 399-H – https://www.nysenate.gov/legislation/laws/GBS/399-DDD

Regulation on How Long You Retain Information

In 2002 the Sarbanes-Oxley Act was created to govern businesses on how long they have to retain their records before you can shred them. If you have any questions you can contact Country Mile Document Destruction to find out if these restrictions apply to you and find out what the retention times are. – https://www.congress.gov/bill/107th-congress/house-bill/3763

You can read more about SOX here.

Businesses with Customer Data

The Fair and Accurate Credit Transactions Act (FACTA) is an amendment to the Fair Credit Report Act (FCRA). This amendment was added to protect the consumer from identity theft. The FACTA is a guideline on how to properly dispose of and protect your customers’ sensitive or personal data such as account numbers, social security numbers, etc. – https://www.ftc.gov/enforcement/statutes/fair-accurate-credit-transactions-act-2003

You can read more about FACTA here.

Residential Dumpster Diving

The Wisconsin legislature, on February 1st, 2000 enacted section 895.505 (Dumpster Diving Law) of the Wisconsin Statutes which could hold businesses and others civilly and criminally liable for not disposing of, or using “personal information” in accordance with the new law. – https://docs.legis.wisconsin.gov/2001/statutes/statutes/895/505/1/b

Did you know that if a person places their garbage on the curb off of their property it is legal for anyone to take it? Private detectives obtain information for their clients in this manner.

Why a Paper Shredder is Not Enough

A paper shredder makes the documents almost impossible for a person to piece together if there are enough pages shredded. A cross-cut paper shredder makes it even harder for a person to piece together the document like a jigsaw puzzle.

But did you know there is software and equipment out there that all you have to do is feed the pieces into a machine and the computer will sort it for you? That’s right, the computer can tell you what the document reads in a very small fraction of the time that it can be done manually, and shredding a document in this way is NOT in accordance with the law. Even confetti-like-sized pieces can be deciphered.

Did you know that you can buy software to do this yourself at home? An Israeli company sells software that can turn any PC and scanner into an “unshredder.”

That is our little blurb for today. I hope you enjoy the rest of your week!

Country Mile Document Destruction is NAID Certified. What Does That Mean?

Being NAID Certified (https://naidonline.org/certifications/) is a guarantee that you are protected by law and that your documents are destroyed in the proper manner. Not only that but Country Mile Document Destruction destroys the documents right there on the spot with one of its many mobile destruction trucks.

The documents are not only shredded but reduced to a pulp that turns it into ‘mush’ that is then recycled.

You can contact Country Mile Document Destruction to properly and legally destroy your documents for you. You can contact them using the following Information.

Ann Younk of Country Mile Document Destruction

Phone: (906) 753-9905

Email: Info@cmdocdestruct.com

Website: https://cmdocdestruction.com/

Call Us Today!

Related Blog Posts
April 23, 2021
Shredded Documents Are Not Safe Enough!
Did you know that you could buy software for $50 that you can scan shredded documents to put them back in order?

Shredding documents is not enough they need to be reduced to a pulp which Country Mile Document Destruction does on-site and hand you a guaranteed certificate on the spot.

Here are the details on how shredding sensitive documents are not enough.

If you purchase the software, there are no restrictions on who can purchase this software, then you can take any shredded document, scan-it, and the software will re-assemble it for you in a fraction of the time of someone doing it by hand. It does not matter if the paper is vertical shredded, cross shredded, or torn. This software that you can install on any computer will sort it out for you.

How does the software do this?

First, you feed all of the pieces into a scanner then the computer software will create a unique ID of each piece fed to the scanner by separating them using various factors such as font type, font size, depth of color of the words, and indentation it uses. Remember separating the piles of a jigsaw puzzle by piece shape and color? This is similar to what the software does.

The software then uses its own matching algorithm to determine which unique piece belongs to another and keeps track of them by the unique ID the software assigned to each piece. It displays close matches on the computer screen for you to verify as well to make the process even faster.

Are there shredders out there that reduce it to a pulp?

Yes, but they cost thousands of dollars and for most businesses, it is not worth it and with the laws in place now for security, there have to be certain measures to take, or else you would be at risk for a lawsuit. An example of one step is that top-secret information that the Department of Defense requires that the size of the paper particles should not exceed five square millimeters.

The Pentagon Promotes a Contest.

DARPA (Defense Advanced Research Projects Agency) offered $50,000 to anyone who can write the software to sort shredded documents. On October 27th, 2011 DARPA first announced the contest.

Welcome to DARPA’s Shredder Challenge!

Today’s troops often confiscate the remnants of destroyed documents in war zones, but reconstructing them is a daunting task. DARPA’s Shredder Challenge calls upon computer scientists, puzzle enthusiasts and anyone else who likes solving complex problems to compete for up to $50,000 by piecing together a series of shredded documents.

The goal is to identify and assess potential capabilities that could be used by our warfighters operating in war zones, but might also create vulnerabilities to sensitive information that is protected through our own shredding practices throughout the U.S. national security community.

Do you have the skills to reconstruct shredded documents and solve the puzzle?

Can you form a team to help solve the complex physical and analytical problems associated with document reconstruction?

If so, register today for a chance to win $50,000!

The Shredder Challenge is comprised of five separate puzzles in which the number of documents, the document subject matter and the method of shredding will be varied to present challenges of increasing difficulty. To complete each problem, participants must provide the answer to a puzzle embedded in the content of the reconstructed document.

The overall prizewinner and prize awarded will depend on the number and difficulty of the problems solved. DARPA will release the challenge problems on October 27, 2011 at 12:00 PM Eastern and announce a winner the week of December 5, 2011 once final results are calculated.

A team of three from San Francisco called “All Your Shreds Belong To Us,” had won the $50,000 prize and today it is available for anyone to purchase and use.

How sophisticated is the software that sorts the pieces?

You can read this article at Hindawi to find out. As an example here are a couple of formulas that they use to do this task.

Legal requirements for shredding.

Here are just a few legal requirements you should know about:
- Does your computer hard drive hold Sensitive Information?
  - In 1984 the federal government passed the Computer Fraud and Abuse Act (CFAA) regulating how businesses deal with sensitive data. Information that has been deleted from your hard drive can still be accessed using special software. The hard drive’s platters have to be destroyed to make the data on it unreadable in order for your data to be securely destroyed.
  - You can read more about the CFAA here.
- Attention banks, credit unions, financial institutions, and small businesses! Do you have sensitive Financial Documents that need to be destroyed?
  - The Gramm-Leach-Bliley Act (GLBA) was passed by the federal government to set up restrictions and guidelines in place that govern how financial institutions dispose of and handle their data.
  - You can read more about the GLBA here.
- Did you know that you are regulated on how long you retain records and when you are allowed to destroy them?
  - In 2002 the Sarbanes-Oxley Act was created to govern businesses on how long they have to retain your records before you can shred them. If you have any questions you can contact us to find out if these restrictions apply to you and find out what the retention times are.
  - You can read more about SOX here.
- Commercial Business Document Destruction
  - The Fair and Accurate Credit Transactions Act (FACTA) is an amendment to the Fair Credit Report Act (FCRA). This amendment was added to protect the consumer from identity theft. The FACTA is a guideline on how to properly dispose of and protect your customer’s sensitive or personal data such as account numbers, social security numbers, etc.
  - You can read more about FACTA here.
- The Wisconsin legislature, on February 1st, 2000 enacted section 895.505 (Dumpster Diving Law) of the Wisconsin Statutes which could hold businesses and other civilly and criminally liable for not disposing of, or using “personal information” in accordance with the new law.
Unshredding documents in the news.

If you follow this link you will see all kinds of stories of shredding and un-shredding documents in the news.

wtvr.com

Restaurant employee, customer info discovered unshredded …All documents, she realized, belonged to the Outback Steakhouse in the West End of Henrico County. “It said Outback Steakhouse and printed …Jan 8, 2020

KTVU San Francisco

Personal medical files were discovered unshredded and dumped at a landfillLedesma took photos of the boxes and the files and called some of the lawyers listed on the documents. She said they didn’t seem too …Oct 3, 2019

The Straits Times

Unshredded confidential papers trashed in CBD a gold mine …Documents containing valuable information are ending up in the trash, unshredded, and making for easy pickings for unauthorized people.Jan 27, 2019

The SunUnshredded NHS records were dumped in a town center to weigh down scaffolding at an art festivalIt is understood organizers contacted CS Recycling in Hertfordshire, which sent cut and part-shredded paper. most read in UK news …Sep 23, 2019

TPM

Warren Pledges To Release Impeachment Docs Withheld By …Great idea, Liz, but what makes you think there will be any documents left unshredded/unwiped to release? Or that Hair Furor will even be …Jan 24, 2020

Peace Arch NewsWhite Rock shredding company says privacy breach allegations are ‘simply untrue’“The allegations that we store unshredded documents in bins at our truck … “No documents, casino cards or any other papers should ever be in …Mar 20, 2019

13WHAM-TV

Office of Public Integrity: local DMV offices mishandled …Some unshredded documents were found inside dumpsters at the DMV offices in Henrietta and Irondequoit earlier this year. (WHAM photo). Sep 6, 2018

The Straits TimesMAS probes case of UOB’s unshredded client data

The bank had also thrown out unshredded documents – marked confidential – of a performance report that highlighted a mix of assets and …Jul 19, 2016

13WHAM-TV

Lawmakers demand answers after personal info found in …The unshredded documents were found inside dumpsters at the DMV offices in Henrietta and Irondequoit. On Friday, Monroe County GOP …May 25, 2018

13WHAM-TV

County to offer free credit monitoring, investigate the handling of …The unshredded documents containing people’s personal information were found inside dumpsters at the DMV offices in Henrietta and …May 29, 2018

Related Blog Posts
March 24, 2020

Category: FACTA

The Importance of a Clean Desk Policy

Understanding Clean Desk Policies

Definition and Purpose

Key Components

Types of Clean Desk Policies

Strict vs. Flexible Policies

Industry-Specific Policies

Benefits of Implementing a Clean Desk Policy

Enhanced Office Security

Increased Employee Productivity

Tips for Effectively Maintaining a Clean Desk

Daily Cleaning Routine

Organizing Digital and Physical Files

Step-by-Step Guide to Implementing a Clean Desk Policy

Developing the Policy

Training Employees

Factors to Consider

Company Culture

Industry Regulations

Pros and Cons of Clean Desk Policies

Advantages

Disadvantages

Conclusion

Related Blog Posts

FACTA Compliance: Enhancing Security with Mobile Data Destruction Services

Understanding FACTA

The Significance of FACTA Compliance

1. Identity Theft Prevention

2. Legal Consequences

3. Protection of Reputation

The Role of Mobile Data Destruction Services

1. On-Site Convenience

2. Immediate Destruction

3. Witnessed Destruction

4. Compliance Expertise

Best Practices for FACTA Data Destruction

In Conclusion

Related Blog Posts

Data and Paper Destruction Laws

1. HIPAA (Health Insurance Portability and Accountability Act)

2. GLBA (Gramm-Leach-Bliley Act)

3. FACTA (Fair and Accurate Credit Transactions Act)

4. GDPR (General Data Protection Regulation)

5. State Data Breach Laws

6. Sarbanes-Oxley Act (SOX)

7. E-Waste Disposal Laws

Related Blog Posts

Why It Can Be Against The Law If You Don’t Destroy Your Documents Correctly

Related Blog Posts

Shredded Documents Are Not Safe Enough!

How does the software do this?

Are there shredders out there that reduce it to a pulp?

The Pentagon Promotes a Contest.

How sophisticated is the software that sorts the pieces?

Legal requirements for shredding.

Unshredding documents in the news.

Related Blog Posts