If you know or have reason to know that your organization has experienced a data breach covered by the Breach Notification Law, you must send written notices as soon as practicable and without unreasonable delay, to:
- The Attorney General’s Office;
- The Office of Consumer Affairs and Business Regulation; and
- The affected Massachusetts residents (the Consumer Notice)
This is general information about your potential reporting obligations under the Breach Notification Law. This is informational only and you should not view this information as legal advice. You should review the law with your attorney to see what applies to your situation.