The business and non-profit communities have been handed the burden of stemming the international identity theft epidemic.  New laws, the most stringent of which are on the books in Massachusetts, require companies and institutions to make comprehensive and costly efforts in the area of data security to protecting individuals’ personal information from theft or loss.  These mandatory efforts include encryption of electronic information and other technological, physical, and administrative security measures, and these measures cover information regarding employees, customers and vendors.