A key piece of Oregon's identity theft law takes effect Jan. 1, 2008. By that date, Oregon businesses, organizations, and government agencies will need to have a plan in place to protect the sensitive data they collect, keep and share.

The law requires you to develop, implement, and maintain reasonable safeguards. This includes a number of measures such as designating one or more of your employees to coordinate a security program; assessing your information processing, transmission, and storage risks; and detecting, preventing, and responding to computerized intrusions. It also includes the proper disposal of information through shredding, or burning, or rendering it unreadable in electronic form through encryption or similar procedure. Click here for more information.

To help you become compliant, we have tools available on this site to help you assess your needs based on paper volume, number of employees etc. Please check out the various forms and charts in the ABOUT section of our Shredder catalog.