Massachusetts Data Breach Update Brings New Notice Requirements

Massachusetts-based companies, such as General Electric Co. and Dell EMC, are among the businesses required to disclose more data security information to the state under a law taking effect in April.

The law, an updated version of one passed in 2007, makes Massachusetts the fourth state to require companies, by statute, to provide credit monitoring services to its residents if a data breach compromises Social Security numbers, Cynthia Larose, Boston-based chair of the privacy and cybersecurity practice at Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C., told Bloomberg Law.

All 50 states and the District of Columbia have data breach ...