Reminder – Compliance with Massachusetts Data Privacy Regulations due by March 1, 2010
The deadline for compliance with the Massachusetts regulations for the protection of personal information is March 1, 2010. To view a complete copy of the regulations, click 201CMR1700reg.pdf.
The Massachusetts Office of Consumer Affairs and Business Regulations (OCABR) originally promulgated these regulations last Fall, mandating that those holding personal information about Massachusetts residents devise and implement specific, detailed policies to protect the security and integrity of that information. Virtually all Massachusetts businesses are covered, and the regulations also apply to entities outside the Commonwealth that hold Massachusetts residents’ Social Security numbers, credit card numbers, driver’s license numbers or financial account numbers.
The purpose of these regulations is to require business practices that minimize the risk of future data breaches and to ensure better protection of that personal information.
If your business holds personal information, as defined by these regulations, you should closely review these regulations to ensure that you are in compliance.