Businesses Given More Time to Comply with New Mass. Data Security Regulations
By Randy Gainer and John D. Seiver
In a press release issued Nov. 14, 2008, the Massachusetts Office of Consumer Affairs and Business Regulation (OCABR) extended the deadline for complying with its new regulations specifying how businesses must protect personal information about Massachusetts residents.
As we described in our September 2008 advisory, the regulations, 201 CMR 17.00, require businesses that store or process information about Massachusetts residents to encrypt documents sent over wireless networks and the Internet, to encrypt documents stored on laptops and other devices, to use firewalls and other security measures to protect the data, and to ensure that their service providers have the capacity to keep the data secure. The regulations had been scheduled to take effect Jan. 1, 2009. Continue reading...