15 U.S.C. § 1681w — Disposal of records

The Federal Trade Commission, the Securities and Exchange Commission, the Commodity Futures Trading Commission, the Federal banking agencies, and the National Credit Union Administration^*, with respect to the entities that are subject to their respective enforcement authority under section 1681s of this title, and in coordination as described in paragraph (2), shall issue final regulations requiring any person^* that maintains or otherwise possesses consumer^* information, or any compilation of consumer information, derived from consumer reports for a business purpose to properly dispose of any such information or compilation.

Each agency required to prescribe regulations under paragraph (1) shall—

In issuing regulations under this section, the agencies identified in paragraph (1) may exempt any person or class of persons from application of those regulations, as such agency deems appropriate to carry out the purpose of this section.

to require a person to maintain or destroy any record pertaining to a consumer that is not imposed under other law; or

to alter or affect any requirement imposed under any other provision of law to maintain or destroy such a record.