JUNE 4, 2026
Representative Mike Connolly joined his Cambridge and Somerville colleagues in the Massachusetts House of Representatives today to pass comprehensive legislation establishing essential consumer data privacy rights for residents of the Commonwealth.
The Massachusetts Consumer Data Privacy Act, S.2619, provides consumers with greater control over their own data. The bill increases accountability for companies and grants user data privacy protections to residents of and those present in Massachusetts. Highlights include strong privacy protections for minors and a blanket ban on the sale of precise geolocation data.
"This legislation is a big milestone in the effort to ensure that Massachusetts keeps pace with the realities of an increasingly data-driven world, where technology is woven into nearly every aspect of our daily lives. For too long, Big Tech has been able to profit off our sensitive personal information. The Massachusetts Consumer Data Privacy Act puts consumers back in control by giving people the right to access, correct, and delete their data, while strengthening safeguards for minors and other vulnerable populations," Representative Mike Connolly said. "It is also a crucial step in standing up to the ongoing assault on privacy from the Trump administration and its MAGA allies who are undermining reproductive freedom and access to LGBTQ+-relevant health care. As access to abortions, gender-affirming care, and other sensitive health services increasingly depends on the protection of personal data, strong privacy safeguards are essential to ensuring that individuals can make personal decisions about their bodies without fear of surveillance, exposure, or discrimination."
Read on for a summary of the The Massachusetts Consumer Data Privacy Act:
Limit Collection to What is Reasonably Necessary
The bill requires that personal data collection must be proportionate to providing requested services, and data must be protected and deleted when no longer necessary or required by law.
Data Subject Rights
Under the bill, data subject rights extend to all residents in Massachusetts. These rights include the right to access their personal information, the right to correct inaccurate information, the right to opt out of certain processes such as targeted advertising, the right to transport personal data, and the right to delete certain information.
Protections for Sensitive Data
The bill specifies that sensitive data, as defined below, cannot be sold or shared without a user’s affirmative consent. Companies cannot sell sensitive data without additional unambiguous, affirmative consent from a consumer.
Sensitive data includes information such as biometric or genetic information, precise geolocation data, health and wellness information, reproductive and sexual health data, data of a minor under 18, government-issued identifiers, and data that reveals an individual’s racial or ethnic origin, national origin or citizenship or immigration status, religious beliefs, sex life, sexual orientation, status as transgender or non-binary, union membership, status as a military service member or veteran, and status as a victim of a crime.
Protection for Children and Minors under 18
The bill provides special protections for individuals under 18, including a prohibition on targeted advertising to minors.
Ban on the Sale of Precise Geolocation Data
The bill includes a ban on the sale of precise geolocation data. Restricting the trade of location data helps protect people from surveillance, stalking, and the misuse of sensitive personal information. This protection is extended to both residents of Massachusetts and visitors, which is especially important now to protect people who travel to and within Massachusetts, including for reproductive and gender affirming health care.
Enforcement
The bill grants the Attorney General rulemaking authority and includes a private right of action. A private right of action allows consumers to hold the largest data holders accountable for any violations they may make. Rulemaking authority will allow the Attorney General to keep up with the pace of technological change and provide greater clarity in areas where it is needed.
Rep. Connolly would like to thank the Speaker of the House Ron Mariano, the Chair of the House Committee on Ways and Means Aaron Michlewitz, the Chair of the Joint Committee on Advanced Information Technology, the Internet and Cybersecurity Tricia Farley-Bouvier, and the underlying bill’s lead sponsors, Reps. Vargas and Rogers, for their leadership in advancing this legislation to the House floor.
Rep. Connolly also extends his gratitude to the ACLU of Massachusetts, Fight for the Future, Mass Equality, and many other advocates and organizations whose leadership and persistence helped move this legislation forward.
Finally, Rep. Connolly would like to thank the many constituents across Cambridge, Somerville, and the Commonwealth who raised their voices in support of stronger data privacy protections and advocated for this bill over many years.
The bill passed the House of Representatives 146-0 and now goes back to the Senate for further consideration.
