Skip to content
BOL Conferences
Thread Options
#276762 - 11/18/04 07:27 PM Final Reg - Records Disposal
OnTheEdge Offline
Diamond Poster
Joined: Apr 2002
Posts: 1,677
SmallTown, USA
For Release: November 18, 2004
FTC Issues Final Regulation on Consumer Information and Records Disposal----- http://www.ftc.gov/
Last edited by OnTheEdge; 11/18/04 07:28 PM.
_________________________
The opinions expressed are mine and do not necessarily reflect those of my employer.

Return to Top
#276763 - 11/18/04 07:41 PM Re: Final Reg - Records Disposal
ahou Offline
Power Poster
ahou
Joined: Aug 2002
Posts: 3,094
Thanks:)
_________________________
Opinions are my own and not of my employer.

Return to Top
#276764 - 11/18/04 08:29 PM Re: Final Reg - Records Disposal
Nanwa Offline
Power Poster
Nanwa
Joined: Oct 2001
Posts: 5,564
Clintonville, WI, USA
Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?
_________________________
Member of the National Sarcasm Society - like we need your support!

Return to Top
#276765 - 11/18/04 09:18 PM Re: Final Reg - Records Disposal
Snowqueen Offline
Diamond Poster
Snowqueen
Joined: Jun 2003
Posts: 2,289
dreaming of a warm beach......
Nanwa, it depends on how intelligent the farm animals are because some may be able to read!!!

(Can't you hear an examiner saying that!!!)

Return to Top
#276766 - 11/18/04 09:26 PM Re: Final Reg - Records Disposal
Wore Out Offline
Platinum Poster
Wore Out
Joined: Dec 2003
Posts: 543
Kentucky
Trying to think like an examiner here...."what if a mule were to have an account number stuck to it's foot and then got out of the yard and wondered into town and scraped its foot against a curb that left the account number on it and someone picked it up and....how would your Info Security Program prevent this risk?"
_________________________
Not even close to being legal advice....I have a bridge for sale too!

Return to Top
#276767 - 11/18/04 09:45 PM Re: Final Reg - Records Disposal
Ted Dreyer Offline
Diamond Poster
Ted Dreyer
Joined: Apr 2001
Posts: 2,245
Quote:

Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?




Yes, but only if you use due diligence in selecting the animal and have a contractual agreement with it to maintain security.

Return to Top
#276768 - 11/18/04 10:00 PM Re: Final Reg - Records Disposal
Peridot Offline
100 Club
Joined: Jan 2004
Posts: 121
Rural Minnesota
Quote:

Umm, does shredding the documents and using them for farm animal bedding qualify as proper disposal?




That is so funny...we do the same thing!!! I say this definitely qualifies as proper security measures for the disposal of customer records.

Thanks Nanwa, we all needed a pick me up after beating our heads against the FACT Act wall!!!
_________________________
My opinions are definitely my own; who else would want them!

Return to Top
#276769 - 11/18/04 10:15 PM Re: Final Reg - Records Disposal
RR Joker Offline
10K Club
RR Joker
Joined: Nov 2002
Posts: 20,654
The Swamp
Oh Gosh! I guess I'd better rush home and check all of mine's feet!!!!!
_________________________
My opinion only. Not legal advice.

Say you'll haunt me - Stone Sour

Return to Top
#276770 - 11/23/04 05:25 PM Re: Final Reg - Records Disposal
Anonymous
Unregistered


Yes, but only if you use due diligence in selecting the animal and have a contractual agreement with it to maintain security.




Any thoughts yet on how to comply with the contractual provisions? Are we going to have to re-review all of our contracts again and put in language regarding Disposal of information in those that concern credit report info usage, storage or disposal?

Return to Top
#276771 - 11/23/04 06:30 PM Re: Final Reg - Records Disposal
HRH Okie Banker Offline
Power Poster
Joined: Jan 2003
Posts: 3,070
Oklahoma
Uh Oh - somebody just opened another door here. Do ya'll feel the draft?
_________________________
Just working here until I get my letter from Hogwarts.

Return to Top
#276772 - 11/23/04 06:34 PM Re: Final Reg - Records Disposal
Wore Out Offline
Platinum Poster
Wore Out
Joined: Dec 2003
Posts: 543
Kentucky
I do believe that the final Disposal Rules are consistant with GLB Safeguarding Rules (which are more comprehensive and strict than FTC rules). I think as long as you can show your due diligence efforts on GLBA with regards to vendors and your own institution practices, you'll be safe in complying with the FTC guidelines.
_________________________
Not even close to being legal advice....I have a bridge for sale too!

Return to Top
#276773 - 11/23/04 06:35 PM Re: Final Reg - Records Disposal
someone else Offline
Power Poster
someone else
Joined: Aug 2004
Posts: 3,300
back to my roots
I am feeling the draft!!
_________________________
Somewhere, something incredible is waiting to be known. - Carl Sagan

Return to Top
#276774 - 11/23/04 08:36 PM Re: Final Reg - Records Disposal
Peridot Offline
100 Club
Joined: Jan 2004
Posts: 121
Rural Minnesota
I was hoping the disposal rules under GLB would be sufficient here as well. Has anyone heard anything along these lines? We already have this huge risk assessment document (which addresses customer information all the way to the point of shredding documents), I hate to think that this will no longer be sufficient either! Assuming that compliance under the safeguarding of customer information provisions of the GLB Act are sufficient and already being complied with, why would those idiots in Congress have felt the need to address this area again in another Act?

I know that was a rhetorical question, and pardon my language, but, this Act just has me so frustrated.
_________________________
My opinions are definitely my own; who else would want them!

Return to Top
#276775 - 01/11/05 03:33 PM Re: Final Reg - Records Disposal
Anonymous
Unregistered

what is the amount of time required to maintain credit applications "on file" to be in compliance with ftc before records can be disposed of-it used to be 25 months. Is this still a requirement and has the time changed?

Return to Top
#276776 - 01/11/05 03:43 PM Re: Final Reg - Records Disposal
Anonymous
Unregistered

any help out there to let me know when I can dispose of credit applications and still be in compliance... or direct me to a website that can give me the parameters?

Return to Top
#276777 - 01/11/05 05:45 PM Re: Final Reg - Records Disposal
Bear Collector, CRCM Offline
Diamond Poster
Bear Collector, CRCM
Joined: Nov 2000
Posts: 1,830
District of Columbia
Peridot,
I just reviewed our GLB confidentiality agreement with our vendors and I do not believe it meets the ยง216 requirements. The biggest issue is due to the fact that we defined customer information to mean information used for personal, family and household purposes. Section 216 takes this a bit further and includes individual information used for business purposes. Therfore, I am making changes to my confidentilaity agreement, which means a contract change to all the vendors we have confidentiality agreements with! Some of these vendor contracts may come up for renewal before July 2006, but for those that do not, we are going to have to send some kind of modification. Oh joy! I'm glad I have 19 months to get this done!
BC
_________________________
Being kind is more important than being important.

Return to Top
#276778 - 01/11/05 05:51 PM Re: Final Reg - Records Disposal
Bear Collector, CRCM Offline
Diamond Poster
Bear Collector, CRCM
Joined: Nov 2000
Posts: 1,830
District of Columbia
Anoan,
I do not believe that the FCRA or the FACT Act changed the Reg B retention requirements. But, keep in mind that this section of the FACT Act applies to more than just your applications and AANs - it applies to any information derived from a credit report. Therefore, if it is your policy to retain the app and the AAN and purge the file of all extraneous notes and calculations regarding the loan, that documentation would be subject to the disposal requirements of FACTA. Also, any e-mail communications regarding the loan would be subject to the FACTA requirements.
BC
_________________________
Being kind is more important than being important.

Return to Top
#276779 - 01/11/05 09:06 PM Re: Final Reg - Records Disposal
Anonymous
Unregistered

What type of e mails? this is the first I have heard of this.

Return to Top
#276780 - 01/11/05 10:06 PM Re: Final Reg - Records Disposal
Bear Collector, CRCM Offline
Diamond Poster
Bear Collector, CRCM
Joined: Nov 2000
Posts: 1,830
District of Columbia
Information security applies to more than just your paper files - it applies to any information shared in any medium. E-mails containg confidential custpmer information should be encrypted if sent outside the bank. This isn't new with FACTA - this has been around since GLB. My concern is that our underwriting is centralized, so if the underwriter has questions or wants to communicate something about the loan application to the front-line person, the underwriter sends an email. the Email might say something like "Customers score is 540 so we can't make the loan." "Or please contact customer regaring derogatory from XYZ>". What worries me is what the front line person does with that email - do they store it on the computer (and how safe is it?) or print it out? If they print it, how do they dispose of it?
BC
_________________________
Being kind is more important than being important.

Return to Top
#276781 - 01/13/05 03:16 PM Re: Final Reg - Records Disposal
Anonymous
Unregistered

After reading the final rule of Section 216 (disposal of information), I believe the section of our information security program dealing of information disposal should be revised from "customer information" to "consumer information"?

Return to Top