Mandatory secure destruction law.

On May 2, 2002, Governor Roy Barnes signed an identity theft bill into law, making Georgia one of only three states with a mandatory secure destruction law requiring businesses to protect personal confidential information. Effective July 1, 2002, the law states that:

  • All businesses must ensure that confidential information is physically, electronically or otherwise destroyed or made unusable before it is discarded.
  • Shredding confidential information is listed as the primary method for secure destruction.
  • Businesses can be held responsible if a customer’s identity is stolen as a result of negligent practices in disposing confidential information.
  • There are no limits on liability if a business violates the law Identity theft is punishable by one to ten years imprisonment and up to $100,000 in fines.

View The Actual Bill.