January’s Coming – Do You Have An Incident Response Plan

If you have a Massachusetts based business or do business in the State of Massachusetts there are some big changes coming your way in January 2020. Last year Massachusetts instituted some changes to their data privacy protection laws and they take effect the first of this year. These laws place new regulations on any company that creates, stores, or transfers data on Massachusetts residents.  To comply companies must update their breach reporting and data handling policies and procedures related to data privacy that will be carried out as part of their incident response and disaster recovery plans in the event of a data breach. It is almost too late for companies to make changes before assessments begin and fines and penalties are instituted.