When it comes to ensuring your data destruction program is compliant with laws including HIPAA and FACTA, there are 3 bases to be sure you have covered—record retention tracking, securing documents before shredding, and how to provide proof of compliance once your shredding is complete.