Massachusetts' Data Security Standards Affects More Than Just MA Companies

The new Massachusetts Data Security Standard (M.G.L. c. 93H) will impact more than just the businesses and government entities in that state; any company that keeps records on Massachusetts customers or employs Massachusetts residents must be in compliance (by May 1, 2009) or face a civil penalty of $5,000 for each violation of 93H. In the case of improper disposal, businesses can be subject to a fine of up to $50,000 for each instance.

Src: Privacy Compliance 101: Why Massachusetts Data Security Standards DO Affect You (CIO)