<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Compliance on Althora</title><link>https://althora.com/tags/compliance/</link><description>Recent content in Compliance on Althora</description><generator>Hugo</generator><language>en-US</language><copyright>© 2026 Althora</copyright><lastBuildDate>Fri, 07 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://althora.com/tags/compliance/index.xml" rel="self" type="application/rss+xml"/><item><title>Still on Windows 10? The Cheap Option Expires in October</title><link>https://althora.com/blog/windows-10-unsupported-massachusetts-business/</link><pubDate>Fri, 07 Aug 2026 00:00:00 +0000</pubDate><guid>https://althora.com/blog/windows-10-unsupported-massachusetts-business/</guid><description>&lt;p&gt;Windows 10 stopped receiving security updates on &lt;strong&gt;14 October 2025&lt;/strong&gt;. That was ten months ago, and a surprising number of Greater Boston offices are still running it on at least some machines.&lt;/p&gt;
&lt;p&gt;That is understandable. Nothing visibly broke. The machines still boot, Outlook still opens, staff still work. The cost of not migrating has been zero so far, which is exactly what makes it easy to keep postponing.&lt;/p&gt;
&lt;p&gt;There is a deadline in October that makes postponing more expensive, and it is worth understanding before it passes.&lt;/p&gt;</description></item><item><title>What 201 CMR 17.00 Actually Requires From a Small Massachusetts Office</title><link>https://althora.com/blog/201-cmr-17-what-it-actually-requires/</link><pubDate>Fri, 07 Aug 2026 00:00:00 +0000</pubDate><guid>https://althora.com/blog/201-cmr-17-what-it-actually-requires/</guid><description>&lt;p&gt;There is a Massachusetts regulation that applies to almost every business in the state, that most small businesses have never heard of, and that has been in force since 2010.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;201 CMR 17.00&lt;/strong&gt; requires any person or business that owns or licenses personal information about a Massachusetts resident to develop, implement and maintain a &lt;strong&gt;written information security program&lt;/strong&gt; — a WISP. There is no employee-count minimum. There is no revenue threshold. Sole proprietors are covered (&lt;a href="https://www.mass.gov/info-details/201-cmr-1700-compliance-checklist"&gt;Mass.gov&lt;/a&gt;).&lt;/p&gt;</description></item></channel></rss>