Where can I learn more about Info Cubic’s Data Retention Policy?
3.13 Record Destruction, Info Security Policy
As a standard, Info Cubic retains data related to the preparation of consumer reports for a period of six (6) years. This retention period is based on the Federal Fair Credit Reporting Act statute of limitations and various contracts with information sources. This retention period applies to information maintained in hard copy and electronic form.
On an annual basis, Info Cubic permanently deletes in a secure manner any consumer information that is older than six (6) years after notifying impacted customers. The data will be inaccessible following the secure deletion. Info Cubic will also delete any information on its own internal servers or maintained as hard copy that is beyond six (6) years. All requests and history for data destruction are logged in the KB for audit purposes.
Any paper documents that contain PII (such as date of birth, SSN and/or driver’s license number) shall be destroyed via a secure shred bin no later than the end of each work day unless there is a legitimate need to retain that information. If that is the case, the information must be locked in a secure cabinet and retained for only as long as necessary to fulfill the business purpose.
If hard copy information must be retained for the entire six (6) year period, it should be scanned and uploaded to pertinent order. The hard copy should then be securely destroyed.
What happens to my data if I do not retain a copy of it by the designated destruction date?
The information that is beyond our six (6) year retention will be permanently destroyed and no further access to it will be available to Info Cubic or our clients.
Will Info Cubic retain my records beyond six (6) years if we request you to?
No. This retention period is based on the Federal Fair Credit Reporting Act statute of limitations and various contracts with information sources.
If an SFTP file is purchased from Info Cubic for the download of our records, who will have access to the records contained in the SFTP?
Only member(s) of your company will be assigned to receive access to the SFTP.
How do we know if we have records in Info Cubic beyond six (6) years?
Info Cubic has conducted research of the clients who placed orders in our systems during the time- period and only those clients were contacted.