How to defend your data security policies to the privacy regulators in the United States
summary
Massachusetts regulations from 2007 require that anyone who holds personal information about a Massachusetts resident follows baked‑in rules: personal data is first and last name plus SSN or financial details, and obligations include a comprehensive written information security program and specific technical controls such as password complexity, encryption and access limits. Regs treat location of data as irrelevant, respond to common breaches like lost laptops or USBs, and signal similar state laws emerging across the US.
AI-written summary · about
chapters (4)
- 0:00Introduction
- 0:25Massachusetts data security regulations
- 1:55Why is this important
- 3:14What do we in Massachusetts demand
related talks
45mPreparing for New US Privacy Laws
52mDeveloping privacy
40mHow the Identity Portions of CCPA Regs Put Consumers and Businesses at Risk
34mAvoiding legal privacy and security snafus with big data and the IoT
01h 01mData Privacy Is Not That Hard
51mPrivacy Past and Present: A Father-Daughter Look at Data Privacy Evolution
01h 07mSECURING PERSONAL DATA: THE “NEW” NORMAL
22mDoes Your Privacy Scale?