Massachusetts' Document Destruction & Data Security Rules

Massachusetts is a small state, but its privacy and data breach laws cover more ground than many states in the country. Under MA General Law Ch. 93H § 2, businesses must protect any personal information they have on state residents. That means restricting access to your records (both paper and electronic), implementing security measures, and having a written comprehensive information security program in place.

Data disposal is regulated in Chapter 93I § 2: "paper documents containing personal information shall be either redacted, burned, pulverized or shredded" and electronic records must be "destroyed or erased". These laws are strictly enforced, and violations can carry hefty fines. To remain compliant and avoid penalties, it's critical for Massachusetts businesses to choose a highly trained document destruction provider like ShredSmart.