Tax time is the perfect time to clean out old files or set up a new file system. But where do you start? And what do you shred to prevent identity theft?

You should shred any unneeded documents or mail that has your personal information on it, and that doesn’t mean just documents that have your Social Security numbers on it. Even junk mail has your name and address on it, and that’s a good start for identity theft. You don’t have to shred the entire catalog or sales ad, just the page with your information on it.

If you still receive your bank statements by mail, shred them after you’ve reviewed them. For identity theft prevention, though, it’s safer to receive your bank statements via email or by viewing your transactions. There’s no reason at all to receive cancelled checks in the mail, either; they’re available online, too.

The same goes for credit card statements. Review them for errors or suspicious charges that may indicate you are already an identity theft victim. The better way to prevent identity theft, though, is to receive your statements online.

Shred your paycheck stubs after reviewing them with every pay period. Some employers still print pay stubs with employees’ complete information on them, including name, address and Social Security number. Incredibly, once their paychecks are in the bank, many people don’t stop to think about how easily they could become identity theft victims by leaving their pay stubs loose in their cars or desk drawers.

Shred all expired credit cards. If you own a shredded, but it doesn’t work on credit cards and CDs, it’s time for an upgrade.

Just cutting up your expired credit cards isn’t enough; they’re easily reconstructed, and with that card, an identity theft can go on an online shopping spree.

Insurance and medical records have enough information for medical identity theft. Shred them.

Expired college ID cards and report cards. Many universities still use students’ Social Security numbers as student IDs for registration, class grades and tuition records.