Draft · internal validation

FTC Disposal Rule

16 CFR Part 682 · Federal Trade Commission

Checks documented disposal measures for consumer-report information held for a business purpose against 16 CFR Part 682. Included in the Safeguards layer at no additional charge.

This pack is a draft.Every requirement traces to official text, but it has not had independent compliance or legal review. These checks are included in the related layer; cited reports open after review.
Requirements3atomic checksCRITICAL1severityHIGH2severityWith official link3/3eCFR section URLRule effectiveJun 1, 2005current textPack version0.1.0-draft.1authored Sep 26, 2026

Requirements

Showing 3 of 3 · official summaries
16 CFR 682.3(a)

The organization uses and monitors reasonable disposal measures for paper, electronic media, and transferred media containing consumer-report information.

CRITICALeCFR
16 CFR 682.3(b)(3)

When a disposal vendor is used, the organization performs due diligence, contracts for compliant disposal, and monitors performance. This paragraph is an illustrative safe practice, not an exclusive method.

HIGHeCFR
16 CFR 682.3(b)(5)

An organization subject to the FTC Safeguards Rule integrates covered disposal controls into its written information security program. This paragraph is an illustrative measure.

HIGHeCFR
All 3 requirements are versioned in the draft pack. Full evidence and remediation guidance remain inside the product.