Thread Options
|
#276762 - 11/18/04 07:27 PM
Final Reg - Records Disposal
|
Diamond Poster
Joined: Apr 2002
Posts: 1,677
SmallTown, USA
|
For Release: November 18, 2004
FTC Issues Final Regulation on Consumer Information and Records Disposal----- http://www.ftc.gov/
Last edited by OnTheEdge; 11/18/04 07:28 PM.
_________________________
The opinions expressed are mine and do not necessarily reflect those of my employer.
|
Return to Top
|
|
|
|
#276763 - 11/18/04 07:41 PM
Re: Final Reg - Records Disposal
|
Power Poster
Joined: Aug 2002
Posts: 3,094
|
Thanks:)
_________________________
Opinions are my own and not of my employer.
|
Return to Top
|
|
|
|
#276764 - 11/18/04 08:29 PM
Re: Final Reg - Records Disposal
|
Power Poster
Joined: Oct 2001
Posts: 5,564
Clintonville, WI, USA
|
Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?
_________________________
Member of the National Sarcasm Society - like we need your support!
|
Return to Top
|
|
|
|
#276767 - 11/18/04 09:45 PM
Re: Final Reg - Records Disposal
|
Diamond Poster
Joined: Apr 2001
Posts: 2,245
|
Quote:
Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?
Yes, but only if you use due diligence in selecting the animal and have a contractual agreement with it to maintain security.
|
Return to Top
|
|
|
|
#276768 - 11/18/04 10:00 PM
Re: Final Reg - Records Disposal
|
100 Club
Joined: Jan 2004
Posts: 121
Rural Minnesota
|
Quote:
Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?
That is so funny...we do the same thing!!! I say this definitely qualifies as proper security measures for the disposal of customer records.
Thanks Nanwa, we all needed a pick me up after beating our heads against the FACT Act wall!!!
_________________________
My opinions are definitely my own; who else would want them!
|
Return to Top
|
|
|
|
#276771 - 11/23/04 06:30 PM
Re: Final Reg - Records Disposal
|
Power Poster
Joined: Jan 2003
Posts: 3,070
Oklahoma
|
Uh Oh - somebody just opened another door here. Do ya'll feel the draft?
_________________________
Just working here until I get my letter from Hogwarts.
|
Return to Top
|
|
|
|
#276772 - 11/23/04 06:34 PM
Re: Final Reg - Records Disposal
|
Platinum Poster
Joined: Dec 2003
Posts: 543
Kentucky
|
I do believe that the final Disposal Rules are consistant with GLB Safeguarding Rules (which are more comprehensive and strict than FTC rules). I think as long as you can show your due diligence efforts on GLBA with regards to vendors and your own institution practices, you'll be safe in complying with the FTC guidelines.
_________________________
Not even close to being legal advice....I have a bridge for sale too!
|
Return to Top
|
|
|
|
#276773 - 11/23/04 06:35 PM
Re: Final Reg - Records Disposal
|
Power Poster
Joined: Aug 2004
Posts: 3,300
back to my roots
|
I am feeling the draft!!
_________________________
Somewhere, something incredible is waiting to be known. - Carl Sagan
|
Return to Top
|
|
|
|
#276774 - 11/23/04 08:36 PM
Re: Final Reg - Records Disposal
|
100 Club
Joined: Jan 2004
Posts: 121
Rural Minnesota
|
I was hoping the disposal rules under GLB would be sufficient here as well. Has anyone heard anything along these lines? We already have this huge risk assessment document (which addresses customer information all the way to the point of shredding documents), I hate to think that this will no longer be sufficient either! Assuming that compliance under the safeguarding of customer information provisions of the GLB Act are sufficient and already being complied with, why would those idiots in Congress have felt the need to address this area again in another Act?
I know that was a rhetorical question, and pardon my language, but, this Act just has me so frustrated.
_________________________
My opinions are definitely my own; who else would want them!
|
Return to Top
|
|
|
|
#276775 - 01/11/05 03:33 PM
Re: Final Reg - Records Disposal
|
Anonymous
Unregistered
|
what is the amount of time required to maintain credit applications "on file" to be in compliance with ftc before records can be disposed of-it used to be 25 months. Is this still a requirement and has the time changed?
|
Return to Top
|
|
|
|
#276776 - 01/11/05 03:43 PM
Re: Final Reg - Records Disposal
|
Anonymous
Unregistered
|
any help out there to let me know when I can dispose of credit applications and still be in compliance... or direct me to a website that can give me the parameters?
|
Return to Top
|
|
|
|
#276777 - 01/11/05 05:45 PM
Re: Final Reg - Records Disposal
|
Diamond Poster
Joined: Nov 2000
Posts: 1,830
District of Columbia
|
Peridot, I just reviewed our GLB confidentiality agreement with our vendors and I do not believe it meets the ยง216 requirements. The biggest issue is due to the fact that we defined customer information to mean information used for personal, family and household purposes. Section 216 takes this a bit further and includes individual information used for business purposes. Therfore, I am making changes to my confidentilaity agreement, which means a contract change to all the vendors we have confidentiality agreements with! Some of these vendor contracts may come up for renewal before July 2006, but for those that do not, we are going to have to send some kind of modification. Oh joy! I'm glad I have 19 months to get this done! BC
_________________________
Being kind is more important than being important.
|
Return to Top
|
|
|
|
#276778 - 01/11/05 05:51 PM
Re: Final Reg - Records Disposal
|
Diamond Poster
Joined: Nov 2000
Posts: 1,830
District of Columbia
|
Anoan, I do not believe that the FCRA or the FACT Act changed the Reg B retention requirements. But, keep in mind that this section of the FACT Act applies to more than just your applications and AANs - it applies to any information derived from a credit report. Therefore, if it is your policy to retain the app and the AAN and purge the file of all extraneous notes and calculations regarding the loan, that documentation would be subject to the disposal requirements of FACTA. Also, any e-mail communications regarding the loan would be subject to the FACTA requirements. BC
_________________________
Being kind is more important than being important.
|
Return to Top
|
|
|
|
#276779 - 01/11/05 09:06 PM
Re: Final Reg - Records Disposal
|
Anonymous
Unregistered
|
What type of e mails? this is the first I have heard of this.
|
Return to Top
|
|
|
|
#276780 - 01/11/05 10:06 PM
Re: Final Reg - Records Disposal
|
Diamond Poster
Joined: Nov 2000
Posts: 1,830
District of Columbia
|
Information security applies to more than just your paper files - it applies to any information shared in any medium. E-mails containg confidential custpmer information should be encrypted if sent outside the bank. This isn't new with FACTA - this has been around since GLB. My concern is that our underwriting is centralized, so if the underwriter has questions or wants to communicate something about the loan application to the front-line person, the underwriter sends an email. the Email might say something like "Customers score is 540 so we can't make the loan." "Or please contact customer regaring derogatory from XYZ>". What worries me is what the front line person does with that email - do they store it on the computer (and how safe is it?) or print it out? If they print it, how do they dispose of it? BC
_________________________
Being kind is more important than being important.
|
Return to Top
|
|
|
|
#276781 - 01/13/05 03:16 PM
Re: Final Reg - Records Disposal
|
Anonymous
Unregistered
|
After reading the final rule of Section 216 (disposal of information), I believe the section of our information security program dealing of information disposal should be revised from "customer information" to "consumer information"?
|
Return to Top
|
|
|
|
|
|