Bill > S2304

This bill aims to enhance consumer protection from security breaches. It amends existing laws to define "consumer" and "personal information," and requires users to obtain written consent from consumers before accessing their credit reports or scores. Additionally, it entitles consumers who have been the subject of a security breach to receive free credit reports and identity theft prevention services from consumer reporting agencies. The bill also prohibits consumer reporting agencies from charging fees for security freeze requests and allows consumers to apply a security freeze across multiple agencies. Finally, it requires entities that own or license personal information of 1,000 or more Massachusetts residents to encrypt the information or implement alternative security measures. The Department of Consumer Affairs and Business Regulation is tasked with promulgating regulations to implement the encryption requirement within 12 months.

Budget and Finance

https://malegislature.gov/Bills/190/S2304