§ 899-aaa. Definitions. As used in this article, the following terms
shall have the following meanings:

1. "Certificate" means a certificate of registration issued under this
article.

2. "Department" means the New York state department of state.

3. "Document" means any record kept, held, filed, produced or
reproduced by, with or for a person or business entity, in any physical
form whatsoever including, but not limited to, reports, statements,
examinations, memoranda, opinions, folders, files, books, manuals,
pamphlets, forms, papers, designs, drawings, maps, photos, letters,
microfilms, or computer tapes or discs.

4. "Document destruction" means the burning, pulverizing, or shredding
of a record, or any action taken to render the personal identifying
information contained on a record unreadable and incapable of
reconstruction.

5. "Document destruction contractor" means a person, firm or
corporation that owns or operates a business, the principal purpose of
which is to destroy records containing personal identifying information
for a fee, and for whom the total cash price of all of his, her or its
document destruction contracts exceeds five hundred dollars during any
period of twelve consecutive months.

6. "Personal information" means any information concerning a natural
person which, because of name, number, personal mark, or other
identifier, can be used to identify such natural person.

7. "Personal identifying information" means personal information
consisting of any information in combination with any one or more of the
following data elements, when either the personal information or the
data element is not encrypted, or encrypted with an encryption key that
is included in the same record as the encrypted personal information or
data element:

(a) social security number;

(b) driver's registration number or non-driver identification card
number; or

(c) mother's maiden name, financial services account number or code,
savings account number or code, checking account number or code, debit
card number or code, automated teller machine number or code, electronic
serial number or personal identification number.

8. "Personal identification number" means any number or code which may
be used alone or in conjunction with any other information to assume the
identity of another person or access financial resources or credit of
another person.

9. "Record" means any information kept, held, filed, produced or
reproduced by, with or for a person or business entity, in any physical
form whatsoever including, but not limited to, reports, statements,
examinations, memoranda, opinions, folders, files, books, manuals,
pamphlets, forms, papers, designs, drawings, maps, photos, letters,
microfilms, or computer tapes or discs.