Complying with MA Data Security Law:
201 CMR 17.00

Protect personal information with a single turnkey compliance solution and comply with the new Massachusetts data security laws

 

On January 1, 2010, all businesses “that own, license, store or maintain personal information about a resident of the Commonwealth” will be required to safeguard that data with a “comprehensive information security program.” Companies that fail to follow their established industry standards (PCI, GLB, HIPAA, etc.) will now be in violation of the law.

 

Apply Protection Where Risk is Highest

With 90% of data breaches occurring electronically, the risk of information loss increases exponentially as data moves from structured to unstructured formats.

 

 

 

Liquid Machines inserts a safety net to protect organizations from accidental breaches. This approach also ensures that employees can continue to safely work with regulated data without interrupting their established routines.

 

Liquid Machines applies security at the information level, minimizing the impact on existing workflows that handle files such as human resources files, payroll data, vendor data, shareholder files, and of course, customer records.

 

Strict Laws Require New Security Measures

The challenges presented by the new legislation can be daunting for any size company. Their implications extend beyond just file protection, requiring companies to use encryption to address all endpoints (including laptops, wireless devices, email, etc.) and monitor systems for unauthorized use.

 

The Cost of Non-Compliance

Companies that are found to be out of compliance or are a victim of a breach can face significant financial losses. Out-of-pocket costs for companies that suffered a breach typically start in the hundreds of thousands of dollars and include legal fees, IT costs, credit reporting services, and public relations.

 

Failure to comply with the law can also result in additional fines of up to $100 per record, prosecution by the attorney general, and class action lawsuits. Additionally, the cost of lost business may be incalculable.

 

Advantages of a Turnkey Software Solution

✔ Easy implementation means faster compliance (you can be up and running in less than a day!) and the technology can be deployed only to employees that actually need to access personal information, not the entire organization.

 

✔ Ease of use means employees are not required to modify their existing routines. Think of it as an invisible safety net that protects your company from accidental information loss or malicious theft.

 

✔ Administrative flexibility allows organizations to manage protection settings without IT assistance and easily disable employee access upon termination.

 

✔ Lower costs are achieved through the use of a hosted solution that automatically protects and monitors the use of information and reduces reliance on IT resources. No need for multiple passwords or different solutions to address different endpoints (laptops, wireless devices, email, etc.).