Massachusetts has taken the lead in passing a new regulation — 201 CMR 17:00 —
that requires companies to implement a comprehensive data security plan that includes
encryption. This new regulation implements the provisions of an earlier data breach
notification regulation.

Processing request, please wait