WeVote
Log In

Bill

Bill

HD 2135

An Act establishing the Massachusetts consumer data privacy act

194th Legislature (2025-2026) Introduced by James Arena-DeRosa and 19 co-sponsors

Summary of HD 2135: Massachusetts Consumer Data Privacy Act Main PurposeThe Massachusetts Consumer Data Privacy Act (HD 2135) is a proposed bill that aims to establish comprehensiv

Senate concurred
0
WeVote Research Nonpartisan
Bill Summary · HD 2135

Summary of HD 2135: Massachusetts Consumer Data Privacy Act

Main Purpose

The Massachusetts Consumer Data Privacy Act (HD 2135) is a proposed bill that aims to establish comprehensive data privacy protections for consumers in the state. The bill seeks to give individuals more transparency, choice, and control over how their personal information is collected, used, and shared by businesses.

Key Provisions

The bill would enact the following key requirements for businesses that collect and process consumer data:

  1. Opt-in Consent: Businesses must obtain opt-in consent from consumers before collecting, using, or sharing their personal data, with limited exceptions.
  2. Data Minimization: Businesses can only collect and retain the minimum amount of personal data necessary to provide their services.
  3. Purpose Limitation: Businesses must inform consumers of the specific purposes for which their data will be used.
  4. Data Access and Deletion: Consumers have the right to access, correct, and delete their personal data held by businesses.
  5. Data Security: Businesses must implement reasonable data security measures to protect consumer data from unauthorized access, use, or disclosure.
  6. Third-Party Sharing Restrictions: Businesses cannot sell or share consumer data with third parties without the consumer's opt-in consent.
  7. Children's Privacy: The bill has additional protections for the personal data of children under 16 years old.

Affected Parties

  • Consumers in Massachusetts who will gain new rights and protections over their personal data
  • Businesses that collect, use, or share the personal data of Massachusetts residents, which will need to comply with the new requirements
  • Technology and data-driven companies that rely on consumer data for their products and services

Procedural Details

  • The bill was introduced in the Massachusetts House of Representatives on February 27, 2025.
  • After passing the House, the bill was concurred by the Massachusetts Senate, indicating its approval by both chambers of the state legislature.
  • If signed into law by the governor, the Massachusetts Consumer Data Privacy Act would take effect 180 days after the date of enactment.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.