Regulations library · US states

201 CMR 17.00

Massachusetts data security regulation

In force Massachusetts security

One of the first prescriptive state security rules: a written information security program, encryption and vendor oversight.

At a glance

Who it applies to
Businesses that own or license personal information of Massachusetts residents.
Who enforces it
Massachusetts Attorney General
When
In effect since 1 March 2010.

This is a reference entry. The priority laws get a full practical guide first.

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Primary sources are being added to this entry.

Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.