Bill > H1754

This bill establishes an Internet Bill of Rights aimed at protecting personal data and ensuring its free movement within Massachusetts. The comprehensive legislation creates a detailed framework for how personal data can be collected, processed, stored, and transferred, with a focus on protecting individuals' privacy rights. Key provisions include establishing clear definitions for terms like personal data, data subjects, and controllers; outlining principles for lawful data processing; defining data subjects' rights (such as the right to access, rectify, or erase their personal data); and creating mechanisms for oversight and enforcement. The bill requires organizations to obtain explicit consent for data collection, implement robust security measures, and provides individuals with greater control over their personal information. The Attorney General is granted significant powers to monitor compliance, investigate potential violations, and impose administrative fines for non-compliance, with penalties ranging from $10-20 million or a percentage of an organization's global annual turnover. The legislation also addresses cross-border data transfers, requiring appropriate safeguards and limitations when personal data is transferred to destinations outside Massachusetts. Notably, the bill applies to both public and private entities and covers various types of data processing, with specific provisions for sensitive categories like health, genetic, and biometric data.

Justice

https://malegislature.gov/Bills/194/H1754