Companies that possess personal information on Massachusetts residents have until March 1 to comply with what experts are calling the toughest data security requirements in the nation, GCN reports. The Massachusetts Data Breach Law requires personal data to be protected with safeguards including encryption, firewalls, antivirus programs and access controls. The law also requires a written information security plan (WISP). "It forces people to lock down their systems and know what they are doing," says Bradley Dinerman, president of the Boston chapter of the National Information Security Group. However, Dinerman points out that compliance and enforcement issues with the state law illustrate the need for a nationwide standard in data security and breach notification.
Full Story