Identity Theft Frequently Asked Questions
Surviving theft of financial identity
201 CMR 16.00: Placing, Lifting and Removal of Security Freezes
Executive Order 504: Order Regarding the Security and Confidentiality of Personal Information
Report on the MGL Chapter 93H Notifications
-
Protecting your financial information from "phishing"
Brochure from the Federal Deposit Insurance Corporation (FDIC) -
Identity Theft Law
8/2/07
The Official Website of the Office of Consumer Affairs & Business Regulation (OCABR)
Consumer Affairs and Business Regulation
Main Menu
Identity Theft
In keeping with Governor Patrick's commitment to balancing consumer protection with the needs of small business owners, the Office of Consumer Affairs and Business Regulation announced on Aug. 17 adjustments to Massachusetts' identity theft regulations that maintain protections and also reinforce flexibility in compliance by small businesses.
The updated regulations, which took effect March 1, 2010, make clear that their approach to data security is a risk-based approach that is especially important to small businesses that may not handle a lot of personal information about customers. Under a risk-based approach, a business, in developing a written security program, should take into account its size, nature of its business, the kinds of records it maintains, and the risk of identity theft posed by its operations.
The updated regulations, which took effect March 1, 2010, make clear that their approach to data security is a risk-based approach that is especially important to small businesses that may not handle a lot of personal information about customers. Under a risk-based approach, a business, in developing a written security program, should take into account its size, nature of its business, the kinds of records it maintains, and the risk of identity theft posed by its operations.