Shredding companies affiliated with the NAID have access to the shredding industry’s best and most current practices regarding document destruction. NAID is a non-profit organization whose mission is to educate businesses, government and service providers of the need to securely destroy discarded information. NAID provides a wealth of knowledge in the debate over recycling versus shredding. Industry experts have written articles and entire chapters addressing people’s misconceptions that paper recycling, often referred to as “pulping,” is a secure method of destroying sensitive documents. According to NAID, “Any organization that selects recycling as an alternative for secure information destruction should reconsider that process, the risks and their obligation” (NAID Advisory #3).
Below is a list of items published by the NAID Advisory that businesses and organizations should consider when determining how to properly protect customers, clients, patients and themselves from the risk of an information data breach:
- Access to scrap paper facilities is generally not restricted or monitored. Public dump sites do not offer any security guarantees.
- Generally, scrap paper companies are not obligated to screen employees.
- There is usually no documented acceptance of fiduciary responsibility between the scrap paper company and the transport companies that haul it to the paper mill or between the paper mill and their employees or between the organization/business and the paper mill.
- Contaminated paper not acceptable to the paper mill is generally disposed of as whole, intact documents and is therefore at risk for exposure.
- The who, what where and when documentation necessary to demonstrate compliance is usually not provided by the paper mill.
- Bales often break at a paper mill. If the material becomes contaminated, it may be disposed of intact.
Outsourcing to a shredding service provider substantially increases the likelihood that all sensitive information that should be destroyed is destroyed. Transporting whole, intact confidential documents and material creates an unnecessary risk that onsite destruction prevents. Imagine a scenario where a document collection truck carrying unshredded documents is in an accident. Or the collection truck is left unlocked or unattended and confidential documents are exposed.
When determining your document and data destruction needs, look for a service provider who is a NAID member and is equipped with the industry’s most advanced destruction equipment. Keep in mind, paper mills are not in the business of security. Data protection is not part of the mission. Although pulping in of itself is a thorough method of destruction, the process of maintaining high levels of security and protecting customers’ confidentiality is not a requirement for paper mills. Whereas contracting with a secure, onsite document destruction service provider, security and data protection is the number one goal!
