The new Massachusetts data security law (201 CMR 17:00) went into effect on 3-1-10. Many small businesses are not aware that they may be subject to this new law. Essentially, if you have anyone’s (including your employees) Social Security number, Driver’s License number, or any financial account number (check, credit card, etc.), you are subject to the law. You need to figure out how to comply or be subject to fines and … worse.
We can potentially provide you with some help. Start by downloading the attached documents and determining what you need to do. Every business subject to the new law needs a WISP (written information security plan). A sample is included with these document.
Disclaimer: Be sure to check with your attorney before adopting any of these plans or documents.
If you have any questions about how you are protected, just give us a call!