Sorry I hit submit too soon. The Mass. laws are similiar to the CT Law regarding safeguarding SS#'s that came out last year. Chances are you already are complying with the MA laws under your GLBA program. You may just have to review and document your policy.