What Happens to Your Information When a Company Goes Under?
The Endpoint Security blog recently reviewed the actions of a Hollywood Video store that went out of business and subsequently threw old membership forms in the dumpster. The blogger inevitably asks the question: who is to blame here?
The answer, as is usually the case, is complicated. As it turns out, disposal is the Bermuda Triangle of data privacy. Whereas an organization, while solvent, is responsible for protecting its customers’ information, the picture becomes somewhat muddy if the company folds. Unless the data breach occurs before the company is completely dismantled, it’s difficult to pinpoint anyone left to be held accountable for fines or notifications. Further, the organizational assets, like desktop computers, are often sold off to the highest bidder. It’s alarming to think how much hardware may get shuffled about, still containing the records it held at the time the company went out of business, because no one wants the added expense of erasing the data.



