Code of Massachusetts Regulations
220 CMR - DEPARTMENT OF PUBLIC UTILITIES
Title 220 CMR 274.00 - Transportation Network Companies
Section 274.12 - Reporting Requirements
Current through Register 1531, September 27, 2024
(1) The Division shall issue orders, guidelines and forms relative to the content of information that a TNC shall report to the Division.
(2) Annually, a TNC shall report to the Division the following:
(3) A TNC shall report monthly to the Division a detailed accounting of all Driver and Rider complaints, received through any means, and the actions that the TNC has taken, if any, to resolve said complaints.
(4) A TNC shall report the following to the Division immediately:
(5) In the event of a breach of security or unauthorized disclosure involving a Driver or Rider's personal information, as defined in 220 CMR 274.10(1), a TNC shall notify the Division as soon as practicable and without unreasonable delay, and notify the Division upon compliance with M.G.L. c. 93H, § 3. A breach of security shall be the unauthorized acquisition or unauthorized use of unencrypted data or encrypted electronic data and the confidential process or key that is capable of compromising the security, confidentiality or integrity of personal information, maintained by a TNC, or on the TNC's behalf, that creates a substantial risk of identity theft or fraud. A good faith but unauthorized acquisition of personal information by or on behalf of a TNC, or employee or agent thereof, for the lawful purposes of such TNC, is not a breach of security unless the personal information is used in an unauthorized manner or subject to further unauthorized disclosure. A breach shall not include the authorized use of personal information for which the TNC obtained consent under 220 CMR 274.10(2). A TNC may delay disclosure as necessary pursuant to M.G.L. c. 93H, § 4.