The state of Georgia signed a new identity theft bill into law, State Bill 475, on May 2, 2002. This law makes it a crime for any business to discard personal information unless it first "shreds, erases, modifies" and makes "reasonably" sure no one will have access to it before it is destroyed.
Penalties Businesses that do not take reasonable measures to protect individuals can suffer severe penalties:
The State of Georgia can charge businesses up to $10,000 in fines
Liability suits for damages will have no limits and are left up to juries to determine the outcome (NAID)