Legislative Update FAQ - Massachusetts 201 CMR 17.00

Data breach notification and the security of personal information are front and center on legislative agendas nationwide. Few have drawn as much attention as 201 CMR 17.00, and for good reason. 201 CMR 17.00, issued by the Massachusetts Office of Consumer Affairs and Business Regulation (OCABR), requires companies that handle the personal information of Massachusetts residents (such as credit card accounts and Social Security numbers in paper or electronic form) to "develop, implement, maintain and monitor a comprehensive written information security program" by January 1, 2010.

Click here for access to Kroll's Massachusetts 201 CMR 17.00 FAQ.