Code of Massachusetts Regulations
205 CMR - MASSACHUSETTS GAMING COMMISSION
Title 205 CMR 138.00 - Uniform Standards of Accounting Procedures and Internal Controls for Gaming
Section 138.73 - Personally Identifiable Information and Confidential Information Security

Universal Citation: 205 MA Code of Regs 205.138

Current through Register 1531, September 27, 2024

(1) Any Confidential Information and Personally Identifiable Information obtained and maintained with respect to a patron, shall be obtained and maintained in compliance with the privacy regulations and standards observed by the Commission, including the application of M.G.L. c. 93H, 201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth, and any other applicable law, regulation or court order for the protection of Personally Identifiable Information or Confidential Information for any patron regardless of residency.

(2) A system of internal controls submitted by a gaming licensee in accordance with 205 CMR 138.02 shall include procedures for the security and sharing of Personally Identifiable Information and Confidential Information, including:

(a) The designation and identification of one or more employees having primary responsibility for the design, implementation and ongoing evaluation of such procedures and practices;

(b) The procedures to be used to determine the nature and scope of all information collected, the locations in which such information is stored, and the storage devices on which such information may be recorded for purposes of storage or transfer;

(c) The measures to be utilized to protect information from unauthorized access; and

(d) The procedures to be used in the event the gaming licensee determines that a Data Breach has occurred, including required notification to the Commission or any other person or entity.

Disclaimer: These regulations may not be the most recent version. Massachusetts may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.