Massachusetts’ new data protection law is designed to prevent security breaches and identity theft. The law requires businesses to encrypt documents sent over the Internet or saved on laptops or flash drives. The compliance deadline has been moved from Jan. 1, 2009 to May 1, 2008. Experts say the new law isn’t well thought out in terms of its broader implications. One expert says it’s unlikely to evolve to a reasonable standard, and by the time it is, it will be obsolete by some time.”]
Source: https://www.csoonline.com/article/2123511/mass–201-cmr-17–the-darkness-and-the-light.html