In one paragraph
Massachusetts S2516 would add G.L. Chapter 93M (Massachusetts Data Privacy Act) and Chapter 93N (Location Shield Act), with consumer rights including opt-out of profiling for solely automated significant decisions. Reported to Senate Ways and Means May 12, 2025. On September 25, 2025 the Senate substituted new draft S2608, which, reprinted as S2619, passed the Senate 40-0; the House passed it with an amendment 146-0 on June 4, 2026, and a conference committee was appointed (Senate June 11, House June 17, 2026). It has not been enacted.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None yet: the bill has not been enacted. If enacted in this form, businesses meeting its thresholds would face opt-out duties, a sensitive-data sale ban and private lawsuits.
Key provisions
- Applies to businesses doing business in Massachusetts or targeting residents that collected or processed personal data of at least 25,000 consumers or derived revenue from selling personal data.
- Sensitive data (including biometric data, precise geolocation and minors' data) may not be sold, and may be transferred only with affirmative consent.
- Consumers may opt out of profiling for solely automated decisions with legal or similarly significant effects, and may question the result and have inaccurate data corrected.
- Privacy notices must describe any collection, processing, selling or sharing of personal data for training or using AI systems, where applicable.
- Attorney General civil penalties of not less than $15,000 per individual per violation; consumers may sue (except against small businesses) for the greater of $15,000 per individual per violation or actual damages, plus punitive damages and fees.
- Data brokers must register annually by January 31 with a $100 fee; government entities and data covered by HIPAA, GLBA and FERPA are exempt.
Latest legislative action
Sep 25, 2025. New draft substituted, see S2608
Sponsors (showing 5 of 34)
| Name | Role |
|---|---|
| Joint Committee on Advanced Information Technology, the Internet and Cybersecurity | Primary |
| Michael D. Brady | Primary |
| Paul R. Feeney D | Primary |
| Rebecca L. Rausch | Primary |
| Sal N. DiDomenico D | Primary |
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error