StacksVerified U.S. regulatory reference

28 CFR §22.25

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
Upon completion of a research or statistical project the security of identifiable research or statistical information shall be protected by:
  1. (a)Complete physical destruction of all copies of the materials or the identifiable portion of such materials after a three-year required recipient retention period or as soon as authorized by law, or
  2. (b)Removal of identifiers from data and separate maintenance of a name-code index in a secure location.