PRESS RELEASE: Massachusetts House Stands Up for Privacy Rights, Passes Massachusetts Consumer Data Privacy Act

Washington, D.C. —  On Thursday, the Massachusetts House unanimously passed the Massachusetts Consumer Data Privacy Act, which includes crucial consumer protections including data minimization provisions and a private right of action. The bill also contains a ban on the sale of precise geolocation data and strong civil rights protections.

EPIC applauds the Massachusetts House of Representatives’ decision to prioritize Bay Staters’ privacy by passing this landmark bill.

“Every day, companies profit from collecting more information about us than they need and using it in ways we don’t expect. This bill changes that,” said EPIC Deputy Director and Policy Director Caitriona Fitzgerald. “Instead of placing the burden on individuals to navigate endless privacy polices and opt-out forms, it establishes meaningful limits on how much data companies can collect in the first place. EPIC thanks the members of the Massachusetts House of Representatives for their leadership on this bill.”

“Today’s vote sends a clear message: People should not have to surrender their privacy to participate in modern life. We hope this legislation serves as a model for states across the country.”

The MCDPA adopts many of the most privacy-protective provisions from other state privacy laws, including:

• data minimization provisions that require companies’ data collection practices to align with consumers’ reasonable expectations; 
• a prohibition on the sale of geolocation data, including of visitors to the Commonwealth; 
• enhanced protections for minors’ personal data, including prohibitions on the sale of such data and its use for targeted advertising; 
• strong civil rights language to prohibit digital discrimination; and 
• a private right of action to ensure individuals can protect their rights.

The Senate unanimously passed its own version last fall, and the two bills will now be reconciled by a conference committee.

EPIC thanks the many lawmakers and advocates whose tireless work made today’s success possible, particularly the ACLU of Massachusetts.

Please contact [email protected] with requests for further comment.

###

ABOUT EPIC

The Electronic Privacy Information Center (EPIC) was established in 1994 to protect privacy, freedom of expression, and democratic values in the information age. Our mission is to secure the fundamental right to privacy in the digital age for all people through advocacy, research, and litigation.