6-129.02. Records destruction; personal information

Notwithstanding any other law and except as provided by an applicable law that requires a retention period that exceeds ten years, a bank or financial institution shall destroy, in a manner prescribed by law, all personal information belonging to a former customer or client not later than ten years after the business relationship ends.