Bill > S25

This bill establishes the Massachusetts Data Privacy Protection Act, which sets forth requirements for how covered entities can collect, process, and transfer individuals' personal data. Key provisions include: - Defining terms like "covered data," "covered entity," and "sensitive covered data," and establishing duties of loyalty and notice requirements for covered entities. - Granting individuals rights to access, correct, delete, and export their covered data, with exceptions. - Providing advanced rights for individuals to opt-out of data transfers and targeted advertising. - Prohibiting covered entities from engaging in targeted advertising to minors if they have knowledge the individual is a minor. - Requiring data brokers to register with the state and provide transparency. - Prohibiting discrimination in the collection and use of data on the basis of protected characteristics. - Establishing enforcement mechanisms, including a private right of action and civil penalties. - Regulating workplace surveillance practices by employers. The bill aims to protect individuals' privacy rights while allowing reasonable data practices by businesses.

Business and Industry

https://malegislature.gov/Bills/193/S25