Bill > H223

This bill amends Chapter 93H of the Massachusetts General Laws to strengthen the security requirements for personal information held by entities that own or license such information about Massachusetts residents. The key provisions are: 1) Requiring entities to develop, implement, and maintain a comprehensive information security program with administrative, technical, and physical safeguards to ensure the security, confidentiality, and integrity of personal information and protect against unauthorized access. 2) Specifying requirements for the security program, such as designating a security coordinator, identifying and assessing risks, implementing appropriate safeguards, and overseeing third-party service providers. 3) Allowing entities that are subject to certain federal laws and regulations to be deemed in compliance with the state requirements. 4) Expanding the required content of the notification to residents in the event of a data breach to include information about the consumer's right to obtain a police report, request a security freeze, and any applicable fees.

Labor and Employment

https://malegislature.gov/Bills/191/H223