What items should I shred?

The question of what to shred is more consequential than most people realize. Most individuals and organizations dramatically underestimate the range of documents and materials that contain exploitable personal or organizational information. A comprehensive shredding policy protects against identity theft, competitive intelligence theft, regulatory violations, and reputational harm. This guide covers every category of document and material that should be shredded rather than discarded intact.

Why the Wrong Disposal Decision Is Costly

Improperly discarded documents have led to identity theft, data breaches, regulatory fines, and competitive intelligence losses. Information that seems meaningless in isolation - a partial account number, an employee name and position, a customer address - becomes exploitable when combined with other information from other discarded documents. Paper shredders are the practical solution to this combination threat because shredding prevents any subsequent information aggregation from the destroyed document. The following categories represent the full range of what a comprehensive shredding program should address.

What Items Should I Shred

Category 1 - Financial Documents

All financial documents should be shredded when no longer needed for legal or tax purposes. This includes: bank statements, credit card statements, investment account statements, tax returns and supporting documents (retain for 7 years before shredding), pay stubs, canceled checks, ATM receipts, loan and mortgage statements, insurance premium notices, and medical explanation-of-benefits statements. Each of these documents contains account numbers, routing numbers, tax identification numbers, or financial position data that enables account fraud, tax fraud, or financial impersonation. Cross-cut shredders at DIN P-4 security level are the minimum standard for financial document destruction.

Category 2 - Personal Identity Documents

Expired identification documents, even when technically invalid, contain personal information that is exploitable. Shred: expired driver's licenses, expired passports (the data page in particular), expired government-issued ID cards, Social Security correspondence containing your full SSN, Medicare and insurance cards showing account numbers or SSN-based identifiers, old voter registration cards, and any document bearing a full Social Security Number. An expired driver's license still contains your name, date of birth, address, physical description, and unique identifier - the expiration date does not protect this information.

Category 3 - Medical and Healthcare Records

Healthcare privacy regulations (HIPAA in the United States) require that protected health information (PHI) be rendered unreadable and unrecoverable before disposal. Documents requiring shredding include: physician correspondence, prescription labels and bottles (containing your name, medication, prescriber, and sometimes DOB), explanation-of-benefits statements, lab results, hospital discharge papers, insurance claims correspondence, and any document bearing a medical record number. Micro-cut shredders provide the highest security for medical information and are recommended for healthcare document destruction.

Category 4 - Legal and Contractual Documents

Legal documents contain information about your assets, liabilities, transactions, and legal relationships. Shred (after the appropriate retention period): expired contracts and agreements, old leases, real estate transaction documents after the statute of limitations, old wills and estate documents that have been superseded by new versions, litigation correspondence, and any document bearing signature, witness information, and terms of agreement.

Category 5 - Business and Corporate Documents

Business document shredding protects competitive intelligence, client relationships, and regulatory compliance. Documents requiring shredding include: client lists and contact databases, pricing information and bid documents, product development information, personnel files and HR correspondence, internal financial reports, merger and acquisition materials, board meeting minutes (after appropriate retention), and any document bearing trade secret or proprietary information. Shredder bags for bulk business document disposal should be used with locking containers when documents are awaiting shredding in common areas.

Category 6 - Non-Paper Media with Sensitive Information

Paper is not the only medium containing sensitive information that requires secure destruction. Shredder accessories for specialty media destruction address: expired credit and debit cards (even debit cards with no remaining balance retain account numbers), expired medical insurance cards, old membership cards with account identifiers, CD and DVD media containing personal data backups or financial software, USB drives with any stored data, and old mobile phones (via certified data erasure or physical destruction rather than shredding).

Shredding Schedule by Document Type

Building a Complete Document Lifecycle Policy

A comprehensive shredding program is most effective as part of a complete document lifecycle policy that governs how documents are created, stored, retained, and ultimately destroyed. Without a lifecycle policy, shredding decisions are made inconsistently - some employees shred everything immediately, others never shred, and most fall somewhere in between with no consistent standard. The result is both over-shredding (destroying documents still within their legal retention period) and under-shredding (retaining expired sensitive documents that should have been destroyed).

The retention schedule is the foundation of the document lifecycle policy. A retention schedule specifies the retention period for each document category and the destruction method appropriate for each. Tax documents: 7 years, cross-cut shredding. Employee records: duration of employment plus 7 years, cross-cut shredding. Medical records: varies by jurisdiction, cross-cut at P-4 minimum or micro-cut for highest sensitivity. Payment card data: destroy immediately after processing is complete, certified card destruction. By documenting the retention period and destruction method for each document type, the policy removes the guesswork from every destruction decision.

Secure destruction containers (locked shred bins) at employee workstations complement the shredder by providing a secure collection point for documents awaiting shredding. Without a secure holding point, sensitive documents sit in desk trays, accumulate in recycling bins (which are not secure disposal), or leave the building in the hands of employees who take work home. Locking shred bins collected and emptied by a shredder operator at regular intervals create a chain of custody from document generation to secure destruction without requiring employees to walk to the shredder for every document.

Troubleshooting

The shredder is becoming full very quickly from high document volume

Establish a regular shredding schedule rather than allowing documents to accumulate. A weekly 15-minute shredding session prevents the pile from reaching unmanageable size. For very high document volumes, upgrade to a shredder with a larger waste bin or higher throughput capacity.

Not sure how long to keep a specific document type before shredding

The IRS provides specific guidance on tax-related document retention periods. For other document types, your accountant, attorney, or HR department should specify the applicable retention period for your jurisdiction and document category. When in doubt, a 7-year retention period for most financial and legal documents is a conservative general standard. See What Are Some Troubleshooting Tips for My Paper Shredder? for shredder operation guidance.

Prescription bottles are jamming the shredder

Prescription bottles should not be put through a standard paper shredder. The safe disposal method is to remove the label from the bottle (destroying the label in the shredder), black out the remaining printed information on the bottle with a permanent marker, and discard the empty bottle separately.

Frequently Asked Questions

Should I shred junk mail?

Yes. Junk mail frequently contains your full name, address, and pre-approved credit offers. Pre-approved credit offers in particular are a known vector for identity theft if intercepted. Shred any junk mail that contains your name, address, or any reference to your financial status.

Do I need to shred items with just my name and address on them?

Name and address alone is low sensitivity but still worth shredding when practical. The larger concern is when name and address appears alongside any of: account number, date of birth, SSN, or medical information. Any combination containing two or more of these should always be shredded.

How do I dispose of documents too large for my shredder?

For oversized documents, use a shredding service. On-site mobile shredding services bring a shredding truck to your location. Off-site shredding services collect locked bins and shred at a facility. Most services provide a destruction certificate.

Should receipts be shredded?

ATM receipts showing account balances should always be shredded. Point-of-sale receipts showing truncated card numbers and totals are lower risk but should be shredded when they also contain your signature or full transaction details.

Is it safe to recycle shredded paper?

Cross-cut and micro-cut shredded paper is accepted by most paper recycling programs. Strip-cut shredded paper may not be accepted by some facilities due to the long strips jamming processing equipment. Check with your local recycling provider.

One practical element of a shredding program that is frequently implemented incorrectly is the placement of secure holding containers. For maximum effectiveness, place a small locking shred receptacle at every location where sensitive documents are regularly generated - individual desk stations, reception desks, copy and print stations, and fax machines. Each shred receptacle should be emptied at least weekly. The program only works if the collection containers are close enough to document generation points that using them requires no additional effort from the document generator.