California
California requires businesses to take reasonable steps to destroy customer records that contain personal information when they dispose of them, by shredding, erasing, or otherwise making the information unreadable.
California Civil Code section 1798.81
