An Act establishing the Massachusetts data privacy act
Massachusetts proposes comprehensive data privacy law granting consumers control over personal data collection while establishing business compliance obligations and enforcement mechanisms.
Massachusetts proposes comprehensive data privacy law granting consumers control over personal data collection while establishing business compliance obligations and enforcement mechanisms.
S 2516 proposes to establish Massachusetts' first comprehensive data privacy law, creating consumer rights and business obligations regarding the collection, use, and sale of personal data. The bill has undergone committee review and amendment, with a new draft (S 2608) substituted during the legislative process as of September 2025.
Data privacy laws significantly affect both consumers and businesses. Massachusetts would join over a dozen U.S. states with comprehensive privacy frameworks, establishing baseline protections for residents' personal information while potentially imposing compliance costs on businesses operating in the state. This reflects growing consumer concern about data collection practices and creates pressure on the federal level to establish uniform standards.
Compiled from official sources — confirm details with the bill’s official record.
Sign in to ask a question.