Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

MA H63: To protect biometric information

Dead/Failed Massachusetts · 2023–2024 session

Last verified Oct 12, 2026 · official bill text

H63 · where it stands

This bill did not become law (dead/failed) · last action May 13, 2024.

What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Massachusetts H 63 (2023-2024) would have added a new chapter 93M to the General Laws restricting how private entities collect and process biometric information, including face geometry, with consent, a written privacy policy and a ban on monetizing the data. It did not pass: on May 13, 2024 the committee folded it into new draft H4632 (the Massachusetts Data Privacy Act), which was sent to House Ways and Means and recorded 'No further action taken' on December 31, 2024, when the session ended.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None: the bill did not pass. Had it become law, most private businesses collecting biometric data from people in Massachusetts would have needed notice, a policy and consent, and could have been sued.

Key provisions

  1. Would bar a covered entity or data processor from collecting biometric information for identification (1-to-n matching) without written notice, its Biometric Privacy Policy and handwritten consent
  2. Would require notice, the policy and consent (handwritten or electronic) for verification (1-to-1 matching); consent expires after three years or when the purpose is met, and the data must then be destroyed
  3. Would make it unlawful to monetize an individual's biometric information
  4. Would require annual reports to the attorney general on warrants and legally required disclosures
  5. Would let individuals alleging harm sue for liquidated damages of the greater of $1,000 or 0.1% of annual global revenue per violation (negligent) or $5,000 or 0.5% (intentional or reckless), plus punitive damages and fees; the attorney general could sue under chapter 93A
  6. Dead: replaced by H4632 on May 13, 2024; no further action taken December 31, 2024. Would have taken effect one year after enactment

Latest legislative action

May 13, 2024. Accompanied a new draft, see H4632

Sponsors

NameRoleDistrict
D Sponsor HD-11-HAM
D Sponsor HD-BARNST
D Sponsor HD-03-HAM
D Sponsor HD-15-NOR

Topics and industries

Affected industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error