Bill > H157

This bill aims to protect the personal identity and information of residents in the Commonwealth of Massachusetts. Key provisions include: 1. Defining "account numbers" to include social security numbers, driver's license numbers, financial accounts, and other personal identifiers. 2. Prohibiting companies and government agencies from obtaining, possessing, or using a person's account numbers without their prior written consent, with limited exceptions (e.g., processing credit card transactions). 3. Requiring companies and agencies to permanently destroy a person's account numbers within a specified timeframe after completing a transaction or use. 4. Prohibiting companies from offering discounts or charging higher prices based on whether a person discloses their identity or account information. 5. Establishing strict liability and penalties for unauthorized access, use, or disclosure of a person's account numbers. 6. Granting residents an expectation of privacy over their account numbers and other personal information, and requiring companies and agencies to have a fiduciary duty to protect this information. 7. Repealing and replacing the existing data breach notification law (G.L. c. 93H, §2) with new regulations to safeguard residents' personal information. Overall, the bill aims to empower residents to maintain control over their personal identity and information, and to hold companies and agencies accountable for any misuse or unauthorized access to this sensitive data.

Labor and Employment

https://malegislature.gov/Bills/190/H157