At the stroke of midnight, amendments passed in 2018 by the Massachusetts legislature to the Data Breach Notification Law will take effect and impose additional requirements on companies covered by the law that suffer a data breach involving the personal information of Massachusetts residents.
The Data Breach Notification Law requires businesses that own or license the personal information of Massachusetts residents of to notify the Office of Consumer Affairs and Business Regulation (OCABR) and the Office of Attorney General when they know, or have reason to know, of a data breach… ESR