Here‘s what you get:
MA 201 CMR 17.00
UPDATE: NEW DEADLINE ANNOUNCED - March 1, 2010
Quick facts regarding the new personal privacy law what was passed by the Massachusetts's State Legislature.
- CMIT Solutions - Boston is compliant and our written plan is available to our clients if they need it for their own auditing or compliance review purposes.
- The law is in effect now - if you have a security breach that contains personal information as described by the law, you could be fined by the Attorney General.
- The March 1, 2010 deadline is the last possible day you have to make sure you can prove you are in compliance
- You must be able to prove to that state that not only your company, but any of your vendors are in compliance. Is your current IT provider in compliance?
- IT security companies are out there pitching their products as a way to get compliant - many of them fall short of the mark. There is no quick fix to this problem.
- CMIT has developed an IT security template that walks clients through the creation of their own written information security plan.
For more information on the new regulations, click on the links below:
- 201 CMR 17.00 Compliance Checklist
Download PDF - August 17, 2009 press release from the state on the extended deadline
August 17 Press Release - Most recent document on the amended regulation - August 2009
Amended Regulation Document
