Massachusetts has set the gold standard when it comes to privacy regulations.    Their new regulation, 201 CMR 17, is entitled Standards for The Protection of Personal Information of Residents of the Commonwealth and can be found here.  The regulations apply to “all persons that own, license, store or maintain personal information about a resident of the Commonwealth”.

Essentially, the regulations apply to any company that employs residents of Massachusetts and any CPA firm that prepares returns for Massachusetts residents.  The requirements of the regulation are comprehensive and will require organizations to devote significant amounts of time, money and energy to ensure compliance.