Bill > S187

This bill amends Massachusetts' security breach law by expanding the definition of sensitive personal information to explicitly include biometric indicators. The bill defines "biometric indicator" as any unique biological attribute that can be used to authenticate an individual's identity, such as fingerprints, genetic information, iris or retina patterns, voice recognition, facial characteristics, or hand geometry. Specifically, the bill adds a new definition of biometric indicators to the existing law and modifies the statute to include biometric indicators as a type of personal information that would trigger security breach notification requirements. This means that if an organization experiences a data breach involving biometric data, they would be legally obligated to notify affected individuals, similar to how they must currently notify people when other types of sensitive personal information are compromised. The changes aim to provide additional protection for individuals' biometric data by ensuring transparency and accountability in the event of a security breach.

Budget and Finance, Labor and Employment

https://malegislature.gov/Bills/194/S187