201 CMR 17.00 and your security programme
Massachusetts data-security regulations require a written information security program for organisations holding residents' personal information. We build to support that programme: encryption in transit and at rest, access controls, logging and a clear record of where personal data lives.