Establishes the Massachusetts Data Privacy Act to protect personal data of residents.

The Massachusetts Data Privacy Act establishes rights for consumers regarding their personal data, including the right to confirm, access, correct, and delete their data. It mandates that controllers limit data collection to what is necessary for specified purposes and requires affirmative consent for processing sensitive data. Controllers must provide clear privacy notices and establish secure means for consumers to exercise their rights. The Act also outlines obligations for data processors and allows the attorney general to enforce compliance, including imposing civil penalties.

Establishes the Massachusetts Data Privacy Act to protect personal data of residents.

The Massachusetts Data Privacy Act establishes rights for consumers regarding their personal data, including the right to confirm, access, correct, and delete their data. It mandates that controllers limit data collection to what is necessary for specified purposes and requires affirmative consent for processing sensitive data. Controllers must provide clear privacy notices and establish secure means for consumers to exercise their rights. The Act also outlines obligations for data processors and allows the attorney general to enforce compliance, including imposing civil penalties.