Interviews with Experts


Chris Zoladz - Privacy Interview

The Challenge of Managing Our Service Provider and Our Service Providers' Service Providers
May 2010

Chris Zoladz
Founder
Navigate LLC

What has changed in laws and regulations that make companies more directly accountable to ensuring that service providers and vendors are doing what they are saying when it comes to protecting personal information?

The most significant change that has occurred is the Massachusetts “Standards for the Protection of Personal Information of Resident of the Commonwealth” regulation that went into effect March 1, 2010. Specifically, the regulation requires that every company that owns, licenses, stores or maintains paper or electronic personal information concerning any Massachusetts resident “take reasonable steps to select and retain third-party service providers who are capable of, and agree in contract to, maintaining appropriate security measures to protect such personal information consistent with these regulations and any applicable federal regulations.

Other topics of interest in this interview include:

  • Key accountabilities for companies in protecting personal information
  • Companies and service providers' processes for management and protecting personal information
  • The different kinds of service providers
  • Sustaining service provider programs

Click here to receive a copy of the complete interview (PDF).

Privacy Statement · Legal notice