Answer:
I've not seen one, but asking your peers in the BOL threads would be as easy way to survey a large group.
You should at the least be able to "borrow" language from your data destruction/disposal policy or procedures under 628, Disposal of records [15 U.S.C. Section 1681w]
(a) Regulations
(1) In general. The Federal Trade Commission, the Securities and Exchange Commission, the Commodity Futures Trading Commission, the Federal banking agencies, and the National Credit Union Administration,with respect to the entities that are subject to their respective enforcement authority under section 621, and in coordination as described in paragraph (2), shall issue final regulations requiring any person that maintains or otherwise possesses consumer information, or any compilation of consumer information,derived from consumer reports for a business purpose to properly dispose of any such information or compilation.
Interestingly I came across this story again. It's dated now, but still supports why you are doing this today.
Copy Machines, a Security Risk?
First published on BankersOnline.com 4/29/13
print
share