Massachusetts
Quick Facts
Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: As soon as practicable and
without unreasonable delay
Government Notification Required: YES
More Details
Scope of this Summary
Covered Info
Form of Covered Info
Encryption Safe Harbor
Breach Defined
Consumer Notice
Timing: Must be made as soon as practicable and without unreasonable delay when covered entity knows or has reason to know a breach or other unauthorized acquisition or use of covered info has occurred.
Content: Notice must include information about resident's right to obtain a police report, how to request a security freeze, and any fees required to be paid to any CRAs for a security freeze. Notification must not include the nature of the incident or the number of residents affected by the incident.
Method: By written notice or electronic notice (if consistent with E-SIGN and Mass. Gen Laws ch 110G). Substitute notice is available if certain criteria are satisfied.
Delayed Notice
Harm Threshold
Government Notice
Consumer Reporting Agency Notice
Third-Party Notice
Potential Penalties
This summary is for informational purposes only. It provides general information and not legal advice or opinions regarding specific facts. Additional requirements or conditions may apply to any or all provisions referenced herein. For more information about the state data breach notification laws or other data security matters, please seek the advice of counsel.
Last revised on July 26, 2019