March 5, 2010 / Law Alert

Massachusetts Data Security Law Goes Into Effect

A new Massachusetts data security law — the “Standards for the Protection of Personal Information of Residents of the Commonwealth”— has gone into effect as of March 1, 2010.

The new law is intended to apply to any business that collects or retains personal information of Massachusetts residents. Personal information, as defined under the law, includes a first name or first initial and last name in combination with any one of a (i) Social Security number; (ii) driver’s license number or state identification card number; or (iii) financial account or credit card number with access codes.