Massachusetts Senate Bill 2619 (194th General Court) "An Act establishing the Masachusetts consumer data privacy act"

Revision as of 02:21, 8 June 2026 by 130.215.207.167 (talk) (Created page with "Following the adoption of privacy-protecting legislation in several other states, the Massachusetts House of Representatives approved a bill "establishing the Massachusetts consumer data privacy act" endowing residents with controls over the data collected on them and collated by data controllers; and reigning in questionable corporate behavior, including the collection of data wholly unnecessary to the product or service being offered, and the use of dark patterns to co...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Following the adoption of privacy-protecting legislation in several other states, the Massachusetts House of Representatives approved a bill "establishing the Massachusetts consumer data privacy act" endowing residents with controls over the data collected on them and collated by data controllers; and reigning in questionable corporate behavior, including the collection of data wholly unnecessary to the product or service being offered, and the use of dark patterns to coerce users into accepting terms of service and privacy policies they otherwise would not agree to.

The bill is not yet law; it is pending the Massachusetts Senate's approval and the governor's signature as of June 8, 2026. Should it become law, it takes effect on July 1, 2027.

Bill Summary

edit
  • The right to access, correct, transport, delete data, and opt-out of data-collection processes [1]
  • Data collection must be necessary for providing the service requested by the consumer, data no longer necessary for the purpose it was collected for must be deleted, and data must be secured via reasonable measures against unauthorized access [1]
  • Complete ban on the sale of precise geolocation data on Massachusetts residents and visitors [2]
  • Sharing or sale of sensitive data requires affirmative consent (the term is defined in the bill) [2]
  • The attorney general has the exclusive authority to enforce this law in most cases, [2] but the bill also provides a private right of action against "the largest corporations" [3]

Bill History

edit
  • February 27, 2025: bills S.29, S.33, and S.45 referred to Advanced Information Technology, the Internet and Cybersecurity committee
  • May 12, 2025: previous three bills combined in bill S.2516 and referred to committee on Senate Ways and Means
  • September 18, 2025: previous bill amended by committee as S.2608 and scheduled for the senate on September 25
  • September 25, 2025: third reading of previous bill in senate passes with amended version reprinted as S.2619
  • June 4, 2026: previous bill engrossed unanimously with amendments published as H.5479

References

edit
  1. 1.0 1.1 Cohn, Jonathan (June 5, 2026). "MA House Unanimously Passes Data Privacy Bill". Progressive Mass. Archived from the original on June 8, 2026. Retrieved June 8, 2026.
  2. 2.0 2.1 2.2 "Massachusetts House passes landmark data privacy legislation with strong consumer protections". Lynn Journal. June 5, 2026. Archived from the original on June 8, 2026. Retrieved June 8, 2026.
  3. Sheridan, Mark (June 4, 2026). "Civil Rights and Reproductive Justice Groups Applaud Unanimous House Passage of Massachusetts Consumer Data Privacy Act". Boston: ACLU of Massachusetts. Archived from the original on June 8, 2026. Retrieved June 8, 2026.