Two Massachusetts officials updated Bay State businesses yesterday on the Commonwealth's new data breach law, MA 201 CMR 17, which goes into effect March 1. SearchSecurity reports that Diane Lawton, general counsel for the Massachusetts Office of Consumer Affairs & Business Regulation (OCABR) and Scott D. Schafer, chief of the consumer protection division at the state's office of the attorney general, said that prompt notice and cooperation with the state could help companies avoid prosecution if a breach occurs. "What we don't want to read about in the [newspapers] is a breach that we should've been notified about," Schafer said. "That's going to cause problems." The two appeared in Springfield at the Massachusetts Information Security Summit.
Full Story