How does your company dispose of sensitive information?
Are records containing personally identifiable information (such as medical records, financial or background check reports, and employment applications) thrown in the trash? Where do records go from there? Is the trash securely shredded or thrown into an unsecured dumpster? What about sensitive electronic information?