Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

Hiring a Shredding Vendor? What the FTC Still Expects From You

10 Jul 2026 · 2 min

Watch on YouTube

1:56

In this informational segment, Speaker A outlines the Federal Trade Commission's expectations for businesses that need to outsource the destruction of sensitive documents. The speaker emphasizes that companies remain responsible for their data until it is verifiably destroyed and must take reasonable measures, including thorough due‑diligence when selecting a document‑destruction contractor. Key steps include vetting vendors, checking references, confirming the security chain of custody, determining whether shredding occurs on‑site in a mobile unit or is transported to a facility, ensuring the transport truck is secured, and requiring contract terms that obligate the vendor to comply with the FTC’s Disposal Rule. The segment concludes by stressing the importance of obtaining a Certificate of Destruction as proof of compliance and a safeguard in the event of an audit. Interspersed is a promotional plug from Speaker B advertising Atlantic Training’s Wave management platform for HR and soft‑skill training, highlighting its automation and tracking capabilities.

Perhaps you have too much data to handle internally. You are a business, not a recycling plant. You want to hire a professional disposal vendor. That is perfectly acceptable. However, you cannot simply hire the cheapest option you find on a flyer. According to the FTC, reasonable measures includes performing due diligence when hiring a document destruction contractor.
Is your employee training scattered across spreadsheets and emails? There's a better way to grow your team. Atlantic Training provides world-class HR and soft skills courses, all hosted inside our Wave management platform. From onboarding automation to tracking leadership development, Wave tracks it all, and you get the software for free when you choose your training plan. Click the link below to build your custom plan now.
You remain responsible for that data until it is verifiably destroyed. You must vet them, check their references, ask about their security chain of custody. Do they shred on-site in a mobile unit or do they transport it to a facility? If they transport it, how is the truck secured? As part of reasonable measures, organizations must require disposal vendors through contract terms to comply with the Disposal Rule. And finally, always obtain a Certificate of Destruction. That document is your proof of compliance. It is your shield if an audit ever occurs.