Remove 2009 Remove Due diligence Remove Litigation
article thumbnail

The State of State Law Cybersecurity Requirements

Debevoise Data Blog

For example, in 2009, Massachusetts enacted several substantive requirements, including a written comprehensive information security program that contains administrative, technical, and physical controls. Code Ann. §§ 14-3502(b), 14‑3503. Other Reasonable Security Laws have imposed more detailed and onerous cybersecurity requirements.