As part of its commitment to protecting its residents and in response to some widely publicized privacy disasters the Commonwealth of Massachusetts came out with brand new Privacy Laws that went into effect on March 1st 2010 (201 CMR 17.00: Standards for the Protection of Personal Information of the Residents of the Commonwealth). Since then a great deal of confusion has developed as to how to interpret the law. These new regulations impose guidelines on both the physical and electronic transmission and storage of data that contain personal information about MA residents. As much of these regulations pertain to IT, Valley ComputerWorks has been following the changes closely. Many businesses are unsure of what to do or whom to turn to. We’ve studied the law and its implications extensively and are working with dozens of small businesses on the road to becoming compliant. The most important aspect of the law is a Written Information Security Plan (WISP) that addresses each article of the law and the actions your organization has taken in response to becoming compliant. Your WISP must be kept on file in your office and can be requested at any time. While many vendors are out selling expensive solutions and using fear of non-compliance as a sales tool, we have found that almost every business we have worked with thus far was able to become complaint with no expensive changes whatsoever.
We believe that it is important businesses simply understand the law and have a comprehensive WISP on hand. As we feel that most business owners are hungry for a solution that focuses on education and simplicity rather than fear and expensive changes, we developed a low cost flat fee compliance package.
If you are currently without a WISP or would like to have your WISP reviewed to ensure that all of your bases have been covered, especially from an IT standpoint, simply click here and one of or our CMR 17 compliance specialists will contact you to setup an appointment.
