
Failure to destroy data properly could result in:
- Identity theft
- Time in prison
- Federal and/or civil liability
- Exorbitant fines or lawsuits
- Irreparable damage to an organization's reputation
- Loss in consumer confidence
- Decline in revenue and loss of clients
- Leaking of trade secrets and intellectual property
ITAMG DATA DESTRUCTION METHODS ARE PERFORMED IN STRICT ACCORDANCE WITH DEPARTMENT OF DEFENSE (DOD) ERADICATION STANDARDS
The U.S. Department of Defense (DOD) Standards (DOD 5220.22-M, DOD 5220.22-M ECE) is the National Industrial Security Program Operating Manual (NISPOM) that the DOD, Department of Energy, Nuclear Regulatory Commission, and Central Intelligence Agency must use. The DOD 5220.22-M standard is the civilian term given to the terms and policies found in NISPOM. It prescribes methods and standards by which classified data needs to be secured.All ITAMG Practices Are in Accordance With the Following:
- Department of Defense (DOD)
- National Security Agency (NSA)
- National Institute of Standards & Technology (NIST) Special Publication Series 800-88
- National Industrial Security Program (NISP) Operating Manual (DOD 5220.22-M)
- Health Insurance Portability and Accountability Act (HIPAA)
- Sarbanes-Oxley Act of 2002
- Fair and Accurate Credit Transactions Act (FACTA)
- Gramm-Leach-Bliley Act
- Bank Secrecy Act
- Patriot Act of 2002
- Identity Theft and Assumption Deterrence Act
- US Safe Harbor Provisions
- FDA Security Regulations (21 C.F.R. part 11)
- PCI Data Security Standard
- Various state laws
Regulations and Compliance
- RED FLAGS RULE - Under the Red Flags rule all companies or services that regularly permit deferred payments for goods or services must develop a written program that identifies and detects the relevant warning signs - or "red flags" - of identity theft.
- FACTA - The Fair and Accurate Credit Transaction Act is a federal law designed to reduce the risk of consumer fraud and identity theft. It applies to every individual or business and violators run the risk of class action suits and penalties.
- HIPAA - The Health Insurance Portability and Accountability Act is a federal law designed to prevent the abuse of personal health information, including unauthorized access. It is administered by the US Department of Health Services and is enforced by the US Office of Civil Rights.
- Recent Changes to HIPAA - The American Recovery & Reinvestment Act of 2009 (ARRA) includes a section that expands the reach of HIPAA and introduces the first federally mandated data breach notification requirement called The HITECH Act.
- Frequently Asked Questions about HIPAA - Provided by the U.S. Department of Health and Human Services - The Office for Civil Rights.
- Gramm-Leach-Bliley (GLB) Safeguards Rule is enforced by the Federal Trade Commission and requires financial institutions to have a security plan to protect the confidentiality and integrity of personal consumer information.







