Bill > S29

This bill establishes the Massachusetts Data Privacy Act, creating comprehensive privacy protections for Massachusetts residents' personal data. The legislation introduces two new chapters to the General Laws: Chapter 93M (Massachusetts Data Privacy Protection Act) and Chapter 93N (Privacy Protections for Location Information Derived from Electronic Devices). The bill defines key terms like "covered data" and "sensitive covered data" and establishes robust rights for individuals, including the ability to access, correct, delete, and export their personal information. Covered entities (businesses collecting data) must obtain clear consent before collecting or processing data, provide transparent privacy policies, and are prohibited from using deceptive practices or "dark patterns" to manipulate user choices. The bill restricts the collection and transfer of sensitive data, bans targeted advertising to minors, and requires data brokers to register with the state. Enforcement mechanisms include both private right of action and potential action by the Attorney General, with potential penalties of up to 4% of a company's annual global revenue or $20 million per action. The legislation aims to give individuals more control over their personal information, protect their privacy, and hold companies accountable for responsible data handling practices. The bill will take effect one year after its enactment, giving businesses time to adapt to the new requirements.

Business and Industry

https://malegislature.gov/Bills/194/S29