Data disposal laws require
A)businesses to destroy customer data and maintain reasonable security procedures to guard against theft.
B)senders of promotional emails to offer an opt-in system to recipients.
C)companies to obtain permission from customers before destroying data older than ten years old.
D)businesses to notify individuals who are affected by any incident that results in unauthorized access of data.

Question

Quizplus · Accepted Answer

Data disposal laws require businesses to take reasonable measures to safeguard customer information against unauthorized access or theft, and to dispose of data securely once it is no longer needed. This can include shredding physical documents, wiping hard drives or databases, or using other secure methods to ensure that the data cannot be accessed by unauthorized parties. Businesses are also required to notify individuals if their personal information has been compromised in a data breach or other security incident. However, there is no requirement to obtain permission from customers before destroying data, and data older than ten years may still be subject to disposal requirements depending on the type of information involved. Additionally, opt-in systems for promotional emails are typically governed by spam laws, rather than data disposal laws.

Data Disposal Laws Require