Most people when they hear there has been a data breach think “online” “credit card” “hacking”. However, did you know that, in the case of small breaches affecting less than 500 people, many are still from good old fashion paper? In addition, did you know that most of these are from human error and could have been prevented?
Personal information on paper, anything from social security numbers to names, birthdates and addresses, are required to be kept and destroyed in a secure manner. The government mandates there are three acceptable ways destroy this personal identifying information (PII), burning, pulverizing or shredding. Most paper breaches come from leaving information unsecured, where it is then found and disseminated or stolen and this has the potential to be a violation. This is particularly so in the case of the HIPAA privacy rule.
Fines are increasing and have been levied on anything from backpacks with notepads left on trains or in delis to boxes of files being left unattended or disposed of in dumpsters.
In most cases, the breaches come from not having a process for using and disposing of paper. Where companies have a policy, educate their staff on its implementation, and the necessary procedures are in place, there is less likely to be a paper data breach.
PROSHRED® Southern New Jersey
199 Edgewood Avenue, Suite A
West Berlin, NJ 08091
Main Office Hours:
Monday - Friday 9:00 AM - 5:00 PM Drop Off Hours Monday-Friday 9:00 AM - 2:00 PM