Massachusetts 201 CMR 17.00 report

This MA 201 compliance report can help financial institutions deal with operational risk derived from online activity by identifying, monitoring, and reporting web application vulnerabilities.

Why it matters

Massachusetts was the first US state to enact their own standards for the security of personal information on business and organizational computers. This data security law applies to any business that electronically stores personal information about a Massachusetts citizen, whether that business is located in or outside of Massachusetts. This legislation aims to protect consumers against identity theft and fraud.