§ 14-3502. Protection against unauthorized access or use  


Latest version.



  •    (a) "Customer" defined. -- In this section, "customer" means an individual residing in the State who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business.

    (b) Destruction of records. -- When a business is destroying a customer's records that contain personal information of the customer, the business shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:

       (1) The sensitivity of the records;

       (2) The nature and size of the business and its operations;

       (3) The costs and benefits of different destruction methods; and

       (4) Available technology.


HISTORY: 2007, chs. 531, 532.