Conclusion
Given the fast-approaching March 1, 2010 deadline, compliance with the data security regulations may prove daunting for many businesses.
The Massachusetts Attorney General is authorized to seek civil penalties for violations of the data security regulations, which may include penalties of up to $5,000 per violation, as well as costs of investigation and enforcement (including reasonable attorneys’ fees).
It is critical that companies begin implementing conforming information security programs as soon as practicable.
Any company handling personal information of Massachusetts residents should act now to ensure timely and proper regulatory compliance.
Robert McHale, Esq. is the founding Partner of R | McHale LLC, a full-service law firm whose corporate practice represents clients on a wide variety of intellectual property law matters, including copyright, trademark, licensing, and other proprietary protections.
He may be contacted at: robert.mchale@rmchale.com