United States of America: Introduced act establishing the Massachusetts Information Privacy and Security Act (SB 227)

On 16 February 2023, the Massachusetts Information Privacy and Security Act (SB 227) was introduced in the Massachusetts Senate. This legislation sets out fundamental principles for managing personal information, including transparency, legitimate purpose, adequacy, limited storage duration, and data security. It asserts that data processing is lawful only with consent and for legitimate purposes. The Act ensures users the right to receive a privacy notice and the choice to opt out of selling personal data and targeted advertising. Additionally, it mandates the protection of sensitive data and establishes the right to delete personal information.