Bill > H4632

This bill establishes the Massachusetts Data Privacy Act, which regulates how covered entities and service providers can collect, process, and transfer individuals' covered data, including sensitive information like biometric and genetic data, and precise geolocation information. The bill grants individuals rights to access, correct, delete, and export their covered data, and requires entities to obtain consent before certain data processing activities. It also prohibits deceptive practices, imposes data minimization and security requirements, and creates enforcement mechanisms including a private right of action and civil penalties for violations.