201 CMR 17.00 -- Massachusetts Privacy Regulation

Bryley is 201 CMR 17.00 compliant -- See how we can help you get there

Watch our webinar on 201 CMR 17.00

 

Basics

Massachusetts introduced 201 CMR 17.00 (Code of Massachusetts Regulation), Standards for the Protection of Personal Information of Residents of the Commonwealth, in the fall of 2008, with an anticipated implementation date of March 1, 2009.  This date was pushed back first to May 1, 2009, then to January 1, 2010, and now to March 1, 2010.

201 CMR 17.00 requires all non-government organizations that have personal information on even one Massachusetts resident to secure and protect this data.  It implements the provisions of Massachusetts General Law c.93H and sets the standards for compliance.

This CMR impacts all non-government organizations that collect and retain personal information on any Massachusetts resident.  It is intended to secure this information from unauthorized access.  It provides specific requirements for the physical and electronic collection and retention of this information.

 

• Who -- Any non-government organization that collects and retains personal information from even one Massachusetts resident
• What -- Protection of personal information on Massachusetts residents
• When -- March 1, 2010
• Where -- Anywhere in the world that personal information on Massachusetts residents is collected and retained
• How -- Code of Massachusetts Regulation
• Why -- To protect the residents of the Commonwealth of Massachusetts

Click here to review the entire CMR document

Bryley seminars on 201 CMR 17.00

In the spring and fall of 2009, Bryley conducted a series of free, well-attended seminars on this regulation that focused on how it will impact your organization and what you will need to do to meet its physical and electronic (computer-based) requirements.  They are now only available as a PowerPoint presentation within a PDF file.

Our seminars review 201 CMR 17.00 and give how-to steps to comply.  You'll learn:

• Why is 201 CMR 17.00 important to your business?
• What is private information and how can it be protected?
• What is risk mitigation and what are some of its best practices?
• What is a Comprehensive Written Information Security Policy (WISP)?

Please call 888.280.5799, option 2, to request a copy of this PDF.