United States of America: Introduced Act establishing the Massachusetts Data Privacy Act (HB 4632)

On 13 May 2024, the Act establishing the Massachusetts Data Privacy Act (HB 4632) was introduced in the House of Representatives, consolidating SB 227, HB 60, HB 80, and HB 83 into one comprehensive act. The Act outlines obligations for entities, excluding those acting in a non-commercial capacity, who independently or jointly determine the purposes and methods of collecting, processing, or transferring covered data. The Act introduces a duty of loyalty requirement for covered entities and service providers, mandating that they refrain from collecting, processing, or transferring covered data unless such actions are reasonably necessary and proportionate for specific purposes. These purposes include providing or maintaining a requested product or service, authenticating users, preventing or responding to security incidents, or complying with state or federal legal obligations.