Shredding companies such as American Document Destruction that are certified and affiliated with the National Association for Information Destruction (NAID) have access to the shredding industry’s best and most current practices regarding document and data destruction. NAID is a non-profit organization whose mission is to educate businesses, government and service providers of the need to securely destroy discarded information. NAID provides a wealth of knowledge in the debate over recycling versus shredding. Industry experts have written articles and entire chapters addressing people’s misconceptions that paper recycling, often referred to as “pulping,” is a secure method of destroying sensitive documents. According to NAID, “Any organization that selects recycling as an alternative for secure information destruction should reconsider that process, the risks and their obligation”.
Below is a list of items published by the NAID Advisory that businesses and organizations should consider when determining how to properly protect customers, clients, patients and themselves from the risk of an information data breach:
- Access to scrap paper facilities is generally not restricted or monitored. Public dump sites do not offer any security guarantees.
- Generally, scrap paper companies are not obligated to screen employees.
- There is usually no documented acceptance of fiduciary responsibility between the scrap paper company and the transport companies that haul it to the paper mill or between the paper mill and their employees or between the organization/business and the paper mill.
- Contaminated paper not acceptable to the paper mill is generally disposed of as whole, intact documents and is therefore at risk for exposure.
- The who, what where and when documentation necessary to demonstrate compliance is usually not provided by the paper mill.
- Bales often break at a paper mill. If the material becomes contaminated, it may be disposed of intact.
Outsourcing to American Document Destruction substantially increases the likelihood that all sensitive information that should be destroyed is destroyed.
When determining your document and data destruction needs, look for a service provider who is NAID certified and is equipped with the industry’s most advanced destruction equipment. Keep in mind, paper mills are not in the business of security. Data protection is not part of the mission. Although pulping in of itself is a thorough method of destruction, the process of maintaining high levels of security and protecting customers’ confidentiality is not a requirement for paper mills. Whereas contracting with a secure, onsite document destruction service provider, security and data protection is the number one goal!