# 17 CFR § 162.21: Proper disposal of consumer information

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/ecfr-17-162.21

## Section

- **Citation:** 17 CFR § 162.21
- **Heading:** Proper disposal of consumer information
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** September 22, 2026
- **Source:** Publisher's official text
- **Location:** Title 17—Commodity and Securities Exchanges > CHAPTER I—COMMODITY FUTURES TRADING COMMISSION > PART 162—PROTECTION OF CONSUMER INFORMATION UNDER THE FAIR CREDIT REPORTING ACT > Subpart B—Disposal Rules

## Text

(a) In general. Any covered affiliate must adopt must adopt reasonable, written policies and procedures that address administrative, technical, and physical safeguards for the protection of consumer information. These written policies and procedures must be reasonably designed to:
(1) Ensure the security and confidentiality of consumer information;
(2) Protect against any anticipated threats or hazards to the security or integrity of consumer information; and
(3) Protect against unauthorized access to or use of consumer information that could result in substantial harm or inconvenience to any consumer.
(b) Standard. Any covered affiliate under this part who maintains or otherwise possesses consumer information for a business purpose must properly dispose of such information by taking reasonable measures to protect against unauthorized access to or use of the information in connection with its disposal.
(c) Examples. The following examples are “reasonable” disposal measures for the purposes of this subpart—
(1) Implementing and monitoring compliance with policies and procedures that require the burning, pulverizing, or shredding of papers containing consumer information so that the information cannot practicably be read or reconstructed;
(2) Implementing and monitoring compliance with policies and procedures that require the destruction or erasure of electronic media containing consumer information so that the information cannot practically be read or reconstructed; and
(3) After due diligence, entering into and monitoring compliance with a written contract with another party engaged in the business of record destruction to dispose of consumer information in a manner that is consistent with this rule.
(d) Relation to other laws. Nothing in this section shall be construed:
(1) To require a person to maintain or destroy any record pertaining to a consumer that is imposed under Sec. 1.31 or any other provision of law; or
(2) To alter or affect any requirement imposed under any other provision of law to maintain or destroy such a record.
[66 FR 21252, Apr. 27, 2001, as amended at 89 FR 71820, Sept. 4, 2024]

## Nearby sections

- [17 CFR § 162.3 § 162.3 Affiliate marketing opt out and exceptions.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.3.md)
- [17 CFR § 162.4 § 162.4 Scope and duration of opt out.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.4.md)
- [17 CFR § 162.5 § 162.5 Contents of opt-out notice; consolidated and equivalent notices.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.5.md)
- [17 CFR § 162.6 § 162.6 Reasonable opportunity to opt out.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.6.md)
- [17 CFR § 162.7 § 162.7 Reasonable and simple methods of opting out.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.7.md)
- [17 CFR § 162.8 § 162.8 Acceptable delivery methods of opt-out notices.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.8.md)
- [17 CFR § 162.9 § 162.9 Renewal of opt out.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.9.md)
- [17 CFR § 162.21 § 162.21 Proper disposal of consumer information.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.21.md)
- [17 CFR § 162.30 § 162.30 Duties regarding the detection, prevention, and mitigation of identity theft.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.30.md)
- [17 CFR § 162.32 § 162.32 Duties of card issuers regarding changes of address.](https://www.frixlaw.com/law-library/statutes/ecfr-17-162.32.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-17-162.21. Check the current official text before relying on it. Not legal advice.