Massachusetts has enacted data privacy and data security regulations that will make it eke out California for the most wide ranging state privacy and security laws--laws that are likely to impact the policies, practices, procedures, contracts and training used by companies nationwide.
The Massachusetts Office of Consumer Affairs and Business Regulation determined that there was a significant need for set of comprehensive standards that ensure businesses are taking practical steps to safeguard personal information. While many of these practices are probably adopted by most companies in some way, shape or form--now a laundry list of minimum standards will be required. And, since it may be impractical for a company to treat information collected from Massachusetts residents differently than others--many companies across the country will need to look holistically at their data privacy and security programs across the country to make sure that they meet the requirements of Massachusetts standards.
Ad Choices