Massachusetts - Protecting Personal Information


Massachusetts has some of the nation’s most rigorous data protection laws.

  • E.g., 2007 breach notification law
    • required the state’s consumer affairs department to issue standards for the protection of personal information:
      • Protect the security and confidentiality of personal information consistent with industry standards
      • Protect against anticipated threats to the security or integrity of personal information
      • Protect against unauthorized access to or use of personal information that could harm a person
  • Massachusetts Standards for the Protection of Personal Information of Residents of the Commonwealth (2010)