Loop + Ledger › Signal › States › Massachusetts
Signal · Massachusetts Live

What does Massachusetts require right now?

The current bills, deadlines, enforcement patterns, and what your district should actually be doing about it · curated by Loop + Ledger.

Active Legislation Updated Aug 04, 2026 Source malegislature.gov
Laws tracked
1
In this state
Enacted
1
On the books
In motion
0
Actively moving
On the books
What's the law in Massachusetts?
Enacted
M.G.L. c. 93H / 201 CMR 17.00
Requires any organization holding Massachusetts residents' personal information — including schools, with no educational exemption — to maintain a Written Information Security Program (WISP) with administrative, technical, and physical safeguards. Mandates detailed technical controls (encryption, access controls). Breach notification required promptly to the AG, OCABR, and affected residents. If a vendor has a breach of school data, vendor bears notification responsibility — contracts must assign these obligations clearly. Schools held to the same standard as financial institutions.
Source →
In motion
What's active right now?
Nothing actively moving in Massachusetts right now.
Book a working session
A 20-minute working session on Massachusetts compliance.
We show up with the actual bill language, your high-risk vendor exposures, and what to do about it before the next deadline.
Book Massachusetts session →
← Back to all 50 states