Delaware is about to get a big bunch of shredded-paper confetti. There’s a new state law that requires commercial entities to take reasonable steps to destroy records containing consumers’ personal identifying information, according to Ieuan Jolly at Loeb & Loeb. And because the First State is popular for incorporation among companies, that’s going to mean a whole lot of shredding.

Ieuan says the “personal identifying information” outlined in the law is defined as a consumer’s first name or initial, in combination with the last name and any of the following elements: Social Security number, passport number, driver’s license, bank account number, credit or debit card number, tax or payroll information, or confidential health-care information, among others.