Notwithstanding any other law and except as provided by an applicable law that requires a retention period that exceeds ten years, a bank or financial institution shall destroy, in a manner prescribed by law, all personal information belonging to a former customer or client not later than ten years after the business relationship ends.
A.R.S. § 6-129.02
Records destruction; personal information
Official source: Arizona State Legislature. Reproduced from public-domain Arizona statutes; confirm against the official source for the current text. Not legal advice.