Technology (Consumer Data Protection)

passed · Massachusetts · Senate Sep 25, 2025

S 2608: An Act establishing the Massachusetts data privacy act

Senate, September 18, 2025 -- The committee on Senate Ways and Means, to whom was referred the Senate Bill establishing the Massachusetts data privacy act (Senate, No. 2516),- reports, recommending that the same ought to pass with an amendment substituting a new draft with the same title (Senate, No. 2608).

Topics ✓ TechnologySupports TechnologyBill establishes Massachusetts data privacy act, directly protecting consumer data privacy per topic description indicators.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

passed · Massachusetts · Senate Dec 8, 2025

S 265: An Act protecting personal identifying information

By Mr. Moore, a petition (accompanied by bill, Senate, No. 265) of Michael O. Moore for legislation to protect personal identifying information. Consumer Protection and Professional Licensure.

Topics ✓ TechnologySupports TechnologyBill explicitly protects personal identifying information, directly advancing data privacy protections under technology policy.95% confidence

Sub-Topics Consumer Data Protection

Track

introduced · Massachusetts · House

HD 707: An Act relative to protecting sensitive information from security breaches

HD 707 defines new categories of sensitive personal information requiring protection, including biometric data (like fingerprints), genetic information, health insurance details, medical history, and precise geolocation data. It updates the definition of "breach of security" to cover unauthorized access to unencrypted data or encrypted data where keys were compromised, with exceptions for legitimate employee actions. The bill requires organizations experiencing a breach to notify both the Attorney General and Consumer Affairs agency, detailing the compromised data types (e.g., biometric or medical information), and to certify credit monitoring services meet new standards - though medical or geolocation data breaches may exempt the notification requirement. This directly affects businesses, government agencies, and healthcare providers handling residents' personal data in Massachusetts.

Topics ✓ HealthcareSupports HealthcareBill explicitly protects health insurance details and medical history as sensitive data requiring breach notification, advancing patient data privacy protections within healthcare context.92% confidence ✓ TechnologySupports TechnologyBill mandates protection of biometric/genetic data and strict breach notifications, strengthening data privacy and cybersecurity requirements for organizations.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Massachusetts · House

HD 1083: An Act to prohibit negative option sales and disclosure of financial and personal information without a consumer’s express agreement

HD 1083 prohibits "negative option" sales where consumers are automatically charged after a trial period unless they actively cancel. It requires sellers to clearly explain all costs, cancellation methods, and deadlines before a trial offer, and to obtain explicit consumer agreement before charging. The bill also bans financial institutions from sharing customers' personal or financial data without their specific permission, with limited exceptions like direct customer authorization. This directly affects consumers by preventing surprise charges and unauthorized data sharing, and impacts businesses (sellers and financial institutions) by mandating clear disclosures and consent.

Topics ✓ TechnologySupports TechnologyBill mandates explicit consent for data sharing and prohibits negative option sales, directly enhancing data privacy protections in digital transactions.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Massachusetts · Senate

SD 1491: An Act protecting transportation network driver data privacy and integrity

SD 1491 protects transportation network driver data privacy by making records held by the state Board confidential and non-public under Chapter 150F. It requires transportation network companies and driver organizations to follow strict data security protocols, including encryption, access controls, and breach protocols, while prohibiting disclosure of driver information for immigration enforcement without a court order. The bill directly affects ride-hailing companies (like Uber/Lyft), driver organizations, and the state Board, mandating specific regulations by 2025-2026 to govern data handling, consent, and sharing during bargaining. Key provisions include limiting data collection to necessary information, requiring driver consent for data sharing, and establishing procedures for verifying driver eligibility and bargaining representation. The law aims to balance bargaining transparency with robust privacy safeguards for drivers.

Topics ✓ ImmigrationSupports ImmigrationProhibits disclosure of driver data to immigration enforcement without court order, limiting state cooperation with federal immigration efforts95% confidence ✓ TechnologySupports TechnologyProtects driver data privacy via encryption, access controls, and prohibits unauthorized disclosure, directly advancing data privacy safeguards in technology policy.95% confidence

Sub-Topics Enforcement Consumer Data Protection Data Privacy

Track

introduced · Massachusetts · House

HD 715: An Act relative to consumer health data

This bill creates new rules for how companies in Massachusetts handle consumers' health information. It directly affects businesses that collect health data (like fitness apps, health insurers, or telemedicine services) by requiring clear, specific consent before gathering or sharing such data. Key provisions include banning deceptive website designs meant to trick users into agreeing, prohibiting consent obtained through broad terms of service, and defining strict limits on selling health data to third parties. The law also clarifies that precise location data used to find health services is protected under these rules.

Topics ✓ HealthcareSupports HealthcareRequires clear consent for health data collection, bans deceptive practices, and protects patient privacy rights under healthcare data handling.95% confidence ✓ TechnologySupports TechnologyRequires explicit consent for health data use, bans deceptive consent tactics, and restricts data selling - directly enhancing consumer data privacy protections in tech.95% confidence

Sub-Topics Telehealth Consumer Data Protection

Track

passed · Massachusetts · Senate Feb 27, 2025

SD 70: An Act protecting personal identifying information

By Mr. Moore, a petition (accompanied by bill, Senate, No. 265) of Michael O. Moore for legislation to protect personal identifying information. Consumer Protection and Professional Licensure.

Topics ✓ TechnologySupports TechnologyBill explicitly protects personal identifying information, directly advancing data privacy protections in technology policy.90% confidence

Sub-Topics Consumer Data Protection

Track

passed · Massachusetts · Senate Feb 27, 2025

SD 1559: An Act relative to protecting biometric information under the security breach law

By Mr. Barrett, a petition (accompanied by bill, Senate, No. 187) of Michael J. Barrett for legislation to protect biometric information under the security breach law. Consumer Protection and Professional Licensure.

Topics ✓ TechnologySupports TechnologyBill protects biometric data under security breach law, strengthening consumer privacy protections in technology policy.95% confidence

Sub-Topics Consumer Data Protection

Track

passed · Massachusetts · House Dec 8, 2025

H 461: An Act relative to consumer health data

By Representatives Sabadosa of Northampton and Owens of Watertown, a petition (accompanied by bill, House, No. 461) of Lindsay N. Sabadosa, Steven Owens and others relative to consumer health data. Consumer Protection and Professional Licensure.

Topics ✓ TechnologySupports TechnologyBill regulates consumer health data handling, strengthening privacy protections under data privacy framework as a core consumer protection measure.95% confidence

Sub-Topics Consumer Data Protection

Track

passed · Massachusetts · Senate Dec 31, 2025

S 187: An Act relative to protecting biometric information under the security breach law

By Mr. Barrett, a petition (accompanied by bill, Senate, No. 187) of Michael J. Barrett for legislation to protect biometric information under the security breach law. Consumer Protection and Professional Licensure.

Topics ✓ TechnologySupports TechnologyBill explicitly protects biometric data under security breach law, strengthening data privacy protections in technology policy.95% confidence

Sub-Topics Consumer Data Protection

Track