Bill > S2687

This bill establishes the Massachusetts Information Privacy and Security Act, which aims to protect personal biometric data and provide individuals with various rights regarding the collection and use of their personal information. The key provisions of the bill include: - Defining key terms like "personal information," "sensitive information," "sale," and "targeted advertising," and establishing the scope and applicability of the law. - Setting forth general principles for the lawful, fair, and transparent processing of personal information. - Granting individuals the right to know what personal information a controller has collected about them, the right to data portability, the right to delete their personal information, the right to correct inaccurate personal information, the right to opt out of the sale of their personal information, and the right to limit the use and disclosure of their sensitive information. - Imposing requirements on controllers and processors, including the need to have a written contract governing the processing of personal information. - Establishing a data broker registration requirement and a risk assessment process for certain types of data processing. - Providing the Attorney General with enforcement authority, including the ability to investigate violations and seek civil penalties of up to $7,500 per violation. - Creating the Massachusetts Privacy Fund to support the Attorney General's enforcement efforts. The bill aims to harmonize privacy laws in Massachusetts and provide individuals with greater transparency and control over their personal information.

Budget and Finance

Advanced Information Technology, the Internet and Cybersecurity (J)

https://malegislature.gov/Bills/192/S2687