SUMMARY
Last year, Massachusetts enacted a comprehensive data security law intended to protect residents from identity theft. While many assumed that the law would be focused on protecting consumers, it broadly covers all businesses with employees in Massachusetts, not just those that collect customer information. Recent regulations impose significant compliance obligations on all employers and require action by the beginning of the year.