As of January 1, 2009, all companies that own, license, store or maintain personal information concerning any

Massachusetts resident must take comprehensive measures to protect that information from unauthorized

access, disclosure or misuse.

Although the new regulations impose a broad range of requirements, the most pressing compliance issue for

many organizations will be the new obligation to encrypt all personal information of Massachusetts residents

that is stored on any portable device which includes laptops, flashdrives, Blackberries or cell phones (to the

extent feasible) that is transmitted over the Internet or by wireless connections.

For more information, please read full legal update.