One of the features of the new Massachusetts Data Privacy Law is that it forces some knowledge management on companies in the context of data breaches. Since the law required compliance on or before March 1, 2010, I assume you already have the policy and safeguards in place. That is, if you have social security...
Read more »

March 1 is the compliance deadline for the Massachusetts Data Privacy Law. 201 CMR 17.00 requires you to be in full compliance on or before January 1, 2009 January 1, 2010 March 1, 2010. If your company receives, stores, maintains, processes or otherwise has access to “personal information” acquired in connection with employment or with...
Read more »

The Data Accountability and Trust Act (H.R. 2221) was passed by the House on Tuesday. This act would requires the Federal Trade Commission to promulgate regulations requiring each person engaged in interstate commerce that owns or possesses electronic data containing personal information to establish security policies and procedures. This bill would preempt any state laws in...
Read more »

Massachusetts has revised its data privacy regulations one more time. The revised regulations are less demanding that the original version released over a year ago. But this law is the strictest in the country and will be the de facto law of the land for many companies. Office of Consumer Affairs and Business Regulation released...
Read more »

UPDATE: Another revision was published on November 5, 2009. See: Massachusetts Amends Its Strict Data Privacy Law (Yet, Again) The Massachusetts’ Office of Consumer Affairs and Business Regulation has decided to amend the strict data privacy law and extend the deadline for compliance. This is yet another amendment to the regulations. The last amendment had...
Read more »

As a follow up to Wednesday’s lunchtime webinar sponsored by Knowledge Management Associates, I wanted to post some materials for those of you that missed it and for those looking for notes and details. The slidedeck: KMA Insights Webinar July 2009 — Compliance with MA Privacy Law View more presentations from Knowledge Management Associates, LLC. My portion of...
Read more »

The current deadline for complying with the Massachusetts Data Privacy Law is January 1, 2010. Since the law protects personal data of the citizens of the Commonwealth of Massachusetts, its reach extends well beyond the state borders. TechTarget  recently held a  seminar on 201 CMR 17. It is tough law to deal with. Even its...
Read more »

Join me for a webinar on the Massachusetts Data Privacy Law. Knowledge Management Associates, LLC is sponsoring a webinar on Preparing for the Strictest Privacy Law in the Nation: MA Privacy Law 201 CMR 17. I will provide an overview of the law. Roberty Boonstra will share some of his best practices around implementation and compliance with the...
Read more »

Goodwin Procter has published a client alert describing the amendments to the Massachusetts Data Privacy Law (my posts on this topic). They detail three changes.  First is pushing bck the complaince deadline to January 1, 2010. Second, theyhave lifted some of the contract amendments and certifications from vendors. Third, they clarified the  wireless encryption requirement. The...
Read more »

According to this press release from the Massachusetts Office of Consumer Affairs and Business Regulation, they have once again extended the deadline for complying the with the regulations. Now the regulations will take effect Jan. 1, 2010. I have not had a chance to analyze the differences yet, but here are the amended regulations under...
Read more »