Mandatory secure destruction law.
On May 2, 2002, Governor Roy Barnes signed an identity theft bill into law, making Georgia one of only three states with a mandatory secure destruction law requiring businesses to protect personal confidential information. Effective July 1, 2002, the law states that:
- All businesses must ensure that confidential information is physically, electronically or otherwise destroyed or made unusable before it is discarded.
- Shredding confidential information is listed as the primary method for secure destruction.
- Businesses can be held responsible if a customer’s identity is stolen as a result of negligent practices in disposing confidential information.
- There are no limits on liability if a business violates the law Identity theft is punishable by one to ten years imprisonment and up to $100,000 in fines.