Relating to consumer protection; requiring record destruction firms conducting business in the state and maintaining or possessing personal information of residents to take reasonable measures to protect against unauthorized access to or use of information to be disposed or destroyed, specifying reasonable measures; requiring adoption of record destruction policies; prescribing penalties
(ra)