Commonwealth of Massachusetts,Standards for the Protection of Personal Information of Residents of the Commonwealth, 201 Mass. Code Regs. 17.01-17.05 (full-text).
This regulation establishes minimum standards to be met in connection with the safeguarding of personal information contained in both paper and electronic records. The objectives of this regulation are to insure the security and confidentiality of customer information in a manner fully consistent with industry standards; protect against anticipated threats or hazards to the security or integrity of such information; and protect against unauthorized access to or use of such information that may result in substantial harm or inconvenience to any consumer.