A licensee may not dispose of the unencrypted, unredacted personal information of a borrower or prospective borrower without first shredding, incinerating, mutilating, erasing, or otherwise rendering the information illegible or unusable.
IC 23-2.5-8-9