On Jan. 10, 2019, the governor of Massachusetts finalized the legislative changes to the state data breach law by placing his signature on HB 4806. The amended law includes several new requirements and raises the bar for businesses collecting data on Massachusetts residents. The update highlights the importance of having a documented process around all aspects of security and risk management. Organizations need to focus on ensuring that their plans are up to date and appropriate to the threats they face, according to a recent Ponemon Institute study.”]