Massachusetts Amends Burdensome Service Provider Oversight Requirements of New Data Security Regulations and Delays Compliance Date Again

In an announcement released late on Thursday, February 12, 2009, the Massachusetts Office of Consumer Affairs and Business Regulation (“OCABR”) revised its new data security regulations for the second time. This development is a welcome change and will alleviate some of the obligations imposed by the regulations. The regulations (and the initial revisions to the regulations) are described at greater length in earlier Morrison & Foerster Legal Updates ('New Massachusetts Regulation Requires Encryption of Portable Devices and Comprehensive Data Security Programs' and 'Massachusetts Delays Effective Date of New Data Security Regulation').

Please see full update for more information.