Tanya Forsheit reports:
As we noted earlier this week, Massachusetts indicated late last week it would issue its last round of amendments to its data security regulations scheduled to take effect March 1, 2010, 201 CMR 17.00. The last round of amendments are not particularly significant, although it is worth noting that, contrary to the amendments made in August, this round clarifies that the regulations cover any entity that stores personal information of Massachusetts residents, in addition to those that receive, maintain, process, or otherwise have access to personal information. Here is the press release from the Office of Consumer Affairs and Business Regulation. Here is the final version of the Regulations. Doug Cornelius has a great analysis here. The effective date of the regulations is still March 1, 2010.
Source: Information Law Group