Data Security Regulation 2.0, Part 2: Massachusetts Has Written Your Information Security Program

Unlike the Nevada law (see Part 1), which is relatively brief and narrowly focused on the encryption of electronically transmitted data, Massachusetts’ new data security regulation, 201 CMR §17.00(pdf), is extremely sweeping and eliminates much private discretion in the realm of information security by imposing comprehensive, detailed operational requirements for business activities that touch personal information.

View post:
Data Security Regulation 2.0, Part 2: Massachusetts Has Written Your Information Security Program