12180: MA - Protection of Personal Information

In late 2009, the Massachusetts Department of Revenue posted its Standards for the Protection of Personal Information of Residents of the Commonwealth, also known as 201 CMR 17.00.

This regulation implements the standards set forth by M.G.L. c. 93H, relative to those persons who own, license, store, or maintain personal information about a resident of the commonwealth of Massachusetts. The regulation further stipulates the minimum standards to be met in connection with the safeguarding of personal information contained in both paper and electronic records.

In short, every person who owns, licenses, stores, or maintains personal information about a resident of the Commonwealth shall be in full compliance with 201 CMR 17.00 on or before January 1, 2010.

As of January 1, 2010, Drake Software meets the minimum standards set forth in M.G.L. c.93H relative to safeguarding personal information contained in both paper and electronic records and is in compliance with minimum regulatory guidance set forth (201 CMR 17.00, .03, .04) when returns are generated and transmitted to taxing authorities through Drake Software and its secure data processing centers.

A copy of 201 CMR 17.00 as amended is attached (click Attachments at the bottom of this screen).