I looked into data destruction in California, and it seems that there are no requirements for the data destruction companies as far as being responsible to destroy documents in a certain way. The businesses that is looking to destroy their documents may have certain requirement and they are responsible for the data not the data destruction company.



there are certain certifications that data destruction companies can acquire but, they are not required in order to do business as a data destruction company. These certifications make the data destruction company more appealing. Some businesses only destroy there documents through data destruction companies that have these certifications.

This is how I understand it anyways.