Upping your Incident Response Game — New Regulations coming

If you are a business and you have data on any Massachusetts resident or do business in Massachusetts, coming in early January, there are new data collection requirements with which you will need to comply. You will have to have a complete incident response plan in place and follow through with a tabletop fire-drill at least annually. You must also have in place enforced data breach notification policies and procedures. As more and more states are adopting increased regulations, businesses are having to up their security game in a big way.