https://www.mass.gov/doc/201-cmr-17-standards-for-the-protection-of-personal-information-of-residents-of-the-commonwealth/download https://www.mass.gov/doc/201-

https://www.mass.gov/doc/201-cmr-17-standards-for-the-protection-of-personal-information-of-residents-of-the-commonwealth/download https://www.mass.gov/doc/201-cmr-17-standards-for-the-protec... It’s very basic. There’s no best practices clauses it’s all “reasonable” clauses. Also no requirement for an external audit.