Are you in compliance with California's privacy protection law?

Title 1.798.81 Part 4 or Division 3 of Civil Code

A business shall take all reasonable steps to destroy, or arrange for the destruction of a customer’s records within its custody or control containing personal information which is no longer to be retained by the business by
(1) shredding,
(2) erasing, or
(3) otherwise modifying the personal information in those records to make it unreadable or undecipherable through any means.