MA H1754: Establishing an internet bill of rights

In one paragraph

Massachusetts H1754 would add G.L. Chapter 93M, an 'Internet Bill of Rights' comprehensive data protection law, including a right not to be subject to decisions based solely on automated processing, including profiling, with legal or similarly significant effects. It did not advance as its own bill: on March 26, 2026 it accompanied study order H5281 (under House Rule 27).

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None: the bill did not advance as its own bill. It would have imposed consent, automated-decision and impact-assessment duties on businesses processing residents' data.

Key provisions

1. 1Applies to controllers and processors, including those outside Massachusetts that offer goods or services to, or monitor, people in the state.
2. 2Section 17(a): right not to be subject to a decision based solely on automated processing, including profiling, with legal or similarly significant effects, with exceptions that still require human intervention, a chance to state a view and to contest.
3. 3Notices and access responses must include 'meaningful information about the logic involved' in automated decision-making.
4. 4Biometric data for unique identification is sensitive data whose processing is prohibited subject to exceptions (Section 6).
5. 5Data protection impact assessments are required for systematic evaluation by automated processing, including profiling (Section 29).
6. 6Personal data breaches must be reported to the Attorney General within 72 hours; children under 16 need parental consent.

Latest legislative action

Mar 26, 2026. Accompanied a study order, see H5281 (under House Rule 27)

Sponsors (showing 5 of 31)