Most organizations fail to shred everything that the law and good practice require because they don’t have a document shredding program. The standard practice for many is to leave the shredding to the discretion of a low level employee. The result is much of what needs to be shredded is sent out with the trash. If you have been reading this blog for any amount of time then you know that boxes of files are magnets for everyone walking by.

The latest example is Flagler County. Instead of shredding they left boxes of sensitive information in the trash. When exposed by the local news they said it was only one box. However, the reporter found more sensitive information after they said the problem was solved.

The incremental cost to shred a box with a shredding service is only a couple of bucks. Why would any organization risk their customers, suppliers and reputation for so small a price?