5.1

Louisiana SB-205 Policy
Louisiana SB-205 is a state data privacy law which protects personally identifiable information. Louisiana
SB-205 was signed into law July 12, 2005 and became effective January 1, 2006. The law applies to any
individual, corporation, partnership, sole proprietorship, joint stock company, joint venture, or any other legal
entity that conducts business in Louisiana and owns or licenses unencrypted computerized data that includes
personally identifiable information.
The policy looks for at least one match to personally identifiable information, which may include:
n
Credit Card Number
n
Credit Card Track Data
n
US Drivers License Number
n
US Social Security Number
Maine LD-1671 Policy
Maine LD-1671 is a state data privacy law which protects personally identifiable information. Maine LD-1671
was signed into law June 10, 2005 and became effective January 31, 2006.
The law applies to any individual, partnership, corporation, limited liability company, trust, estate,
cooperative, association, or other entity, including agencies of state government, the University of Maine
System, the Maine Community College System, Maine Maritime Academy and private collages and
universities, or any information in whole or in part in the business of collecting, assembling, evaluating,
compiling, reporting, transmitting, transferring or communicating information concerning individuals for the
primary purpose of furnishing personally identifiable information to nonaffiliated third parties that maintains
computerized data that includes personally identifiable information.
The policy looks for at least one match to personally identifiable information, which may include:
n
Credit Card Number
n
Credit Card Track Data
n
US Drivers License Number
n
US Social Security Number
Massachusetts CMR-201
Massachusetts CMR-201 is a state data privacy regulation which protects personally identifiable information.
Massachusetts CMR-201 was issued on September 19, 2008 and became effective May 1, 2009. The regulation
applies to all businesses and other legal entities that own, license, collect, store or maintain personal information
about a resident of the Commonwealth of Massachusetts.
The policy looks for at least one match to personally identifiable information, which may include:
n
ABA Routing Numbers
n
Credit Card Number
n
Credit Card Track Data
n
US Bank Account Numbers
n
US Drivers License Number
n
US Social Security Number
Chapter 15 vShield Data Security Management
VMware, Inc. 191