Effective June 1, 2005, the Disposal Rule requires any person or entity who maintains or otherwise possesses consumer information for a business purpose to properly dispose of the information to protect against unauthorized access to or use of the information. Consumer information means any record about an individual that is a consumer report or is derived from a consumer report, or a compilation of such records. This rule implements section 216 of the Fair and Accurate Credit Transactions Act of 2003, which is designed to reduce the risk of consumer fraud and related harms, including identity theft, created by improper disposal of consumer information.

On September 15, 2016, the Commission requested comments on the rule as part of the Commission's systematic review of all current Commission rules and guides. 81 FR 63435. The comment period will close on November 21, 2016.