Bill > S46

This bill establishes the Massachusetts Information Privacy Act. The key provisions are: 1. Defines terms like "personal information," "biometric information," and "sensitive personal information," and establishes general principles and duties for covered entities and data processors to protect individual privacy. 2. Grants individuals rights of access, correction, data portability, and deletion of their personal information, with specific requirements for covered entities to facilitate these rights. 3. Requires covered entities to provide meaningful notice to individuals about the collection and processing of their personal information, and to obtain consent before collecting or processing personal information. 4. Prohibits covered entities from disclosing personal information to third parties without the individual's consent, with some exceptions. 5. Establishes a Massachusetts Information Privacy Commission to oversee and enforce the new law, and provides for private rights of action and civil penalties for violations. 6. Includes provisions related to workplace surveillance, restricting employers' use of electronic monitoring of employees. The bill is set to take effect 12 months after enactment, with enforcement delayed until 18 months after enactment.

Business and Industry

https://malegislature.gov/Bills/192/S46