Witnessed shredding: watch your documents shredded in Tewksbury

Here is the rule of thumb we give at the counter. For three boxes of household paper, drive down and use drop-off shredding. For thirty boxes at an office in Nashua, book a pickup. For the handful of files someone has to sign off on personally, book a witnessed session and bring only those.

One result surprises people. For small loads, watching can cost less than a pickup. A pickup adds a transportation fee by zone, while a witnessed session adds a dollar a pound. Below about 130 pounds, a witnessed session is cheaper than a Zone 1 pickup. Below about 160 pounds it beats Zone 2, and below about 200 pounds it beats Zone 3. You do the driving, of course.

The trade-off flips at volume. Once you pass ten boxes, pickup and drop-off both switch to flat box rates, and the per-pound premium for watching starts to add up fast. Our off-site shredding page explains the zones, the access rule and what the driver does at your door.

For worked break-even examples by volume and zone, see the drop-off vs off-site comparison. If you are still deciding whether your files need a witness at all, our article on when witnessed shredding is worth it walks through legal holds, executive files, estates and audits one at a time.

Usually not. The federal disposal rules our customers deal with most focus on the result, paper that cannot be read or put back together, and on choosing a careful vendor. Watching is one way to satisfy yourself about both. It is rarely written into the rule itself.

The FTC Disposal Rule, 16 CFR Part 682, applies to anyone who keeps consumer report information for a business purpose. Section 682.3 gives the burning, pulverizing or shredding of papers so the information cannot practicably be read or reconstructed as an example of a reasonable measure. It also lists hiring a record destruction company after due diligence, such as checking references or reviewing an audit of its operations.

HIPAA works the same way. The Privacy Rule at 45 CFR 164.530(c) requires covered entities to have appropriate administrative, technical and physical safeguards for protected health information. The Security Rule at 45 CFR 164.310(d)(2)(i) requires policies for the final disposition of electronic health information and the media it lives on. Neither section says a staff member has to stand at the shredder. Our page on HIPAA shredding requirements goes through what each rule asks for.

New Hampshire’s breach notice law, RSA 359-C:20, is written around computerized personal information. It requires a business that discovers a breach to notify affected residents and, in most cases, the Attorney General’s office. Shredding paper properly is about keeping old records from ever turning into that kind of problem.

So where does a witness requirement come from? Mostly from inside your own organization or your client relationships. A firm’s file-closing policy, a client engagement letter, a settlement term, an insurer, or a board resolution may ask for it. When one of those does, the witnessed session and the signed certificate give you the record to prove it was followed.

Retention comes before destruction. The IRS says to keep most income tax records for three years, six years if income was underreported by more than 25 percent, seven years for a bad debt or worthless securities claim, and four years for employment tax records. Shred after those clocks run out, not before.