Laws and Industry Standards Defining and Regulating Sensitive Data

Mass. Identity Theft Prevention Law

Signed into law on August 3, 2007, the state's Identity Theft Protection Law stipulates what the state considers protected personal data, steps to take in the event of a breach, and the ways in which personal data must be destroyed.