Industry - Policy Change
Executive Summary
Massachusetts lawmakers unanimously passed a comprehensive data privacy law that gives residents the right to access and delete their personal data while banning companies from selling precise geolocation information without explicit consent. The law applies to companies processing data of more than 100,000 consumers and also prohibits the sale of other sensitive information including biometric data, health records, and details about religion or sexual orientation. The statewide ban on locati...
What Happened
On June 5, 2026, the Massachusetts House of Representatives unanimously passed the Consumer Data Privacy Act with 146 votes, following similar Senate approval in September 2025. The law grants Massachusetts residents rights to access and delete their personal data held by companies processing information from more than 100,000 consumers. It prohibits the sale of sensitive information without explicit consent, including precise geolocation data, biometric data, health records, and information about religion, immigration status, and sexual orientation. The bill now awaits the governor's signature to become law.
Who Is Affected
The law applies to mid-sized startups and large technology companies that process personal data of more than 100,000 consumers, affecting how they handle information of Massachusetts residents and visitors. Users whose location data has been collected through apps, as well as those whose sensitive personal information including biometric, health, and demographic data has been gathered, will gain new control over their information. Data brokers, advertising companies that rely on location targeting, and app developers who previously sold user location data will be restricted from these practices.
Why It Matters
This legislation represents one of the strongest state-level privacy protections in the United States, particularly through its statewide ban on selling precise location data, addressing years of documented abuses by tech, advertising, and social media industries. Massachusetts joins other states filling the regulatory gap created by the absence of federal privacy legislation, potentially setting a precedent that influences privacy standards nationwide. The prohibition on location data sales is especially significant given that such data has been accessible to trackers and governments through data broker markets, and comes after federal efforts to ban such sales were reversed by the Trump administration.
What You Should Do
Once the law takes effect after the governor's signature, Massachusetts residents should identify which companies hold their personal data and exercise their new rights to request access to or deletion of that information from companies covered by the law. Review privacy settings in apps and services you use, particularly those that collect location data, and revoke permissions for apps that do not need location access to function. Going forward, carefully examine consent requests for the collection and sale of sensitive information including location data, biometric data, and health information, and decline consent unless absolutely necessary for the service you're using.
Summary generated from verified sources and reviewed before publication. How we summarize.