Information Security Policy

Commonwealth Automobile Reinsurers - Information Security Policy

The Standards for the Protection of Personal Information of Residents of the Commonwealth, codified at 201 CMR 17.00, require that anyone who owns or licenses Personal Information about a resident of the Commonwealth of Massachusetts establish minimum standards for the safeguarding of such information. CAR is subject to this regulation and adopts this Information Security Policy in conformance therewith.

I. Purpose

II. Administration

III. Risk Assessment

A. Administrative Safeguards

B. Technical Safeguards

C. Physical Safeguards

IV. If a Breach Occurs