It has an ugly name, but word is starting to spread about “201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth”.
Shall we call it SPPIRC — pronounced “sparc”?
I briefly mentioned the MA Executive Order No. 504 last month, and TaoSecurity has today posted a number of links to information on SPPIRC.
If you handle the personal information of a resident of MA, then you need to plan for compliance with the Commonwealth’s new rules.