The Situation...
- It is a legal requirement to destroy personal information when it is discarded.
- Your customers insist upon privacy. They will stop doing business with companies who are careless with their information.
- The news media is aggressively looking for headlines involving breaches of privacy.
- Trade secret and non-compete agreements lose legal protection if information is not protected at all times, including when discarded.
- There currently is a dramatic increase in demand for shredding services.
The Problem...
- There are some companies offering secure or "self-certified" shredding services that have inadequate security either from lack of experience or low standards.
- Customers unfamiliar with secure destruction services often don't have enough information to determine which service providers are serious about security.
- Many customers do not have the time to regularly monitor the security standards of their secure destruction service provider (as many regulations now require).
The Solution:
NAID Certification...
- Uses a combination of scheduled and surprise audits to verify that secure destruction services consistently meet operational standards
- Helps the client establish the due diligence required to comply with HIPAA, Gramm-Leach-Bliley and FACTA
- Qualifies as the annual business associate review required of covered entities under HIPAA
- Meets the standard for reasonableness that is generally accepted by government agencies and courts
- Most importantly, it makes sure the customer is getting the security they require
|