12 CFR § 222.83 - Disposal of consumer information.
(a) Definitions as used in this section.
(1) You means member banks of the Federal Reserve System (other than national banks) and their respective operating subsidiaries, branches and agencies of foreign banks (other than Federal branches, Federal agencies and insured State branches of foreign banks), commercial lending companies owned or controlled by foreign banks, and organizations operating under section 25 or 25A of the Federal Reserve Act (12 U.S.C. 601 et seq., 611 et seq.).
(b) In general. You must properly dispose of any consumer information that you maintain or otherwise possess in accordance with the Interagency Guidelines Establishing Information Security Standards, as required under sections 208.3(d) (Regulation H), 211.5(l) and 211.24(i) (Regulation K) of this chapter, to the extent that you are covered by the scope of the Guidelines.
(c) Rule of construction. Nothing in this section shall be construed to:
(1) Require you to maintain or destroy any record pertaining to a consumer that is not imposed under any other law; or
(2) Alter or affect any requirement imposed under any other provision of law to maintain or destroy such a record.