By Mr. Montigny, a petition (accompanied by bill, Senate, No. 43) of Mark C. Montigny for legislation to protect personal biometric data. Advanced Information Technology, the Internet and Cybersecurity.
By Ms. Creem, a petition (accompanied by bill, Senate, No. 29) of Cynthia Stone Creem, Rebecca L. Rausch, Joanne M. Comerford, James B. Eldridge and other members of the Senate for legislation to establish the Massachusetts Data Privacy Protection Act. Advanced Information Technology, the Internet and Cybersecurity.
By Mr. Finegold, a petition (accompanied by bill, Senate, No. 301) of Barry R. Finegold for legislation to establish the Massachusetts Information Privacy and Security Act. Economic Development and Emerging Technologies.
By Mr. Finegold, a petition (accompanied by bill, Senate, No. 364) of Barry R. Finegold for legislation relative to student and educator data privacy. Education.
By Mr. Driscoll, a petition (accompanied by bill, Senate, No. 33) of William J. Driscoll, Jr. for legislation to establish the comprehensive Massachusetts consumer data privacy act. Advanced Information Technology, the Internet and Cybersecurity.
This bill (HD 1330) requires Massachusetts internet service providers (ISPs) to obtain explicit written customer consent before collecting, using, disclosing, or selling their personal information. It prohibits ISPs from charging extra fees or denying service to customers who do not provide this consent. The law also mandates that ISPs cannot sell personally identifiable customer data without express written authorization, which customers can revoke at any time in writing. This directly affects all ISPs operating in Massachusetts with state agreements or using state facilities, ensuring greater control over customer data privacy.
This bill establishes Massachusetts' first comprehensive data privacy law, directly affecting businesses that collect personal information from residents. It requires covered entities (primarily commercial businesses handling personal data) to obtain clear, specific consent for data processing - banning deceptive practices like "dark patterns" that trick users into sharing information. Key provisions include strict rules for handling biometric data, prohibiting the use of broad terms of service as consent, and creating new definitions for terms like "data broker." Small businesses with under $20 million annual revenue and certain nonprofits are exempt from most requirements.
By Representatives Vargas of Haverhill and Cataldo of Concord, a petition (accompanied by bill, House, No. 103) of Andres X. Vargas and Simon Cataldo for legislation to establish the Massachusetts neural data privacy protection act. Advanced Information Technology, the Internet and Cybersecurity.
By Representative Hogan of Stow, a petition (accompanied by bill, House, No. 80) of Kate Hogan and Lindsay N. Sabadosa for legislation to establish a comprehensive consumer data privacy act. Advanced Information Technology, the Internet and Cybersecurity.
By Mr. Cronin, a petition (accompanied by bill, Senate, No. 2259) of John J. Cronin for legislation to protect transportation network driver data privacy and integrity. Telecommunications, Utilities and Energy.
