{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/regler/massachusetts-data-security",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:a569063fbd526c80f8ba5a346684c6e4c9e96182c44669b8de9c6c7a85d76628",
    "jurisdiction": "us",
    "lang": "sv"
  },
  "item": {
    "id": "massachusetts-201-cmr-17",
    "slug": "massachusetts-data-security",
    "layer": "us",
    "name": "Massachusetts standarder för skydd av personuppgifter",
    "shortName": "Massachusetts 201 CMR 17.00",
    "level": "state",
    "state": "MA",
    "identifier": "201 CMR 17.00",
    "legislationIdentifier": "201 CMR 17.00",
    "adopted": "2009-11-04",
    "applies": "2010-03-01",
    "status": "in_force",
    "sourceUrl": "https://www.mass.gov/regulations/201-CMR-1700-standards-for-the-protection-of-personal-information-of-residents-of-the",
    "url": "https://legal.exploreworldai.com/us/regler/massachusetts-data-security",
    "api": "https://legal.exploreworldai.com/api/public/v1/us-rules/massachusetts-data-security",
    "readAt": "2026-08-15",
    "source_confidence": "derived",
    "officialUrl": "https://www.mass.gov/regulations/201-CMR-1700-standards-for-the-protection-of-personal-information-of-residents-of-the",
    "officialPublisher": "mass.gov",
    "mirrorUrl": null,
    "provenance": {
      "source_confidence": "derived",
      "identifier": "201 CMR 17.00",
      "layer": "us",
      "official_url": "https://www.mass.gov/regulations/201-CMR-1700-standards-for-the-protection-of-personal-information-of-residents-of-the",
      "official_publisher": "mass.gov",
      "mirror_url": null,
      "mirror_publisher": null,
      "canonical": "https://legal.exploreworldai.com/us/regler/massachusetts-data-security",
      "api": "https://legal.exploreworldai.com/api/public/v1/us-rules/massachusetts-data-security",
      "read_at": "2026-08-15",
      "version": "legal-2026-08-25",
      "hash": "sha256:06c53edfbcd556d4bb0abd71e7aa0774cfeff0e71044ffc74f96797455a1dd47",
      "citation": "201 CMR 17.00, Massachusetts standarder för skydd av personuppgifter. ExploreWorld Legal, https://legal.exploreworldai.com/us/regler/massachusetts-data-security (hämtad 2026-08-15, bevis sha256:06c53edfbcd556d4, bygge legal-2026-08-25).",
      "credit": "ExploreWorld Legal, legal.exploreworldai.com",
      "usage": "Fri återgivning med angiven källa och läsdatum. Kontrollera alltid raden mot den officiella publiceringen innan den används i ett ärende.",
      "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
      "contract": "https://legal.exploreworldai.com/citering"
    },
    "statusNote": "I kraft sedan 2010 och fortfarande den mest detaljerade delstatliga säkerhetsföreskriften, med ett skriftligt säkerhetsprogram uttryckligen krävt i texten.",
    "sourceUrls": [
      "https://www.mass.gov/regulations/201-CMR-1700-standards-for-the-protection-of-personal-information-of-residents-of-the",
      "https://www.mass.gov/orgs/office-of-consumer-affairs-and-business-regulation"
    ],
    "blocks": [
      {
        "id": "wisp",
        "title": "Written information security program",
        "reference": "201 CMR 17.03",
        "scope": "A documented program with named responsibility, risk assessment, training and annual review."
      },
      {
        "id": "vendor",
        "title": "Third party service providers",
        "reference": "201 CMR 17.03(2)(f)",
        "scope": "Selection of providers able to protect personal information, with the duty written into the contract."
      },
      {
        "id": "encryption",
        "title": "Encryption",
        "reference": "201 CMR 17.04(3)",
        "scope": "Encryption of personal information transmitted across public networks and stored on portable devices."
      }
    ],
    "euCrosswalk": []
  },
  "meta": {
    "build": "legal-2026-08-25",
    "builtAt": "2026-08-25",
    "engine": "legal-answer/1.1.0",
    "api": "v1",
    "license": "Källhänvisningar och identifierare. Ingen lagtext återges.",
    "disclaimer": "Deterministisk källuppslagning, inte juridisk rådgivning och inget efterlevnadsbeslut."
  },
  "hash": "sha256:a569063fbd526c80f8ba5a346684c6e4c9e96182c44669b8de9c6c7a85d76628",
  "version": "legal-2026-08-25",
  "expires": "2026-09-01T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:a569063fbd526c80f8ba5a346684c6e4c9e96182c44669b8de9c6c7a85d76628",
    "revalidate_after": "2026-08-30T06:55:18.416Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/us/regler/massachusetts-data-security",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "usageInfo": "https://legal.exploreworldai.com/citering"
}