Signal · Massachusetts Live
What does Massachusetts require
right now?
The current bills, deadlines, enforcement patterns, and what your district should actually be doing about it.
curated by Loop + Ledger
Laws tracked
1
In this state
Enacted
1
On the books
In motion
0
None active
Most recently enacted
What just became law?
Enacted
M.G.L. c. 93H / 201 CMR 17.00Massachusetts Written Information Security Program (WISP) Requirement
Requires any organization holding Massachusetts residents' personal information — including schools, with no educational exemption — to maintain a Written Information Security Program (WISP) with administrative, technical, and physical safeguards. Mandates detailed technical controls (encryption, access controls). Breach notification required promptly to the AG, OCABR, and affected residents. If a vendor has a breach of school data, vendor bears notification responsibility — contracts must assign these obligations clearly. Schools held to the same standard as financial institutions.
Watch list
What's coming up?
No upcoming deadlines on the tracker.
Book a working session
A 20-minute working session on Massachusetts compliance.
See clearly.
Act strategically.
Protect what matters.