A growing trend at both state and federal levels is the enactment of laws and regulations imposing obligations on businesses to ensure sensitive, personally identifiable information is permanently destroyed or irretrievably erased. In particular, these obligations must be reflected in relevant third party vendor agreements. If an outsource vendor must transfer personal information to removable media, the vendor must be contractually bound to scrub that media of the information once it is no longer needed. By ensuring data is properly destroyed or erased, businesses and their vendors can both limit their ongoing risk.”]