On 16 February 2023, the Massachusetts Data Privacy Protection Act (HB 83) was introduced in the House of Representatives. This legislation targets entities or individuals, excluding those acting in a non-commercial capacity, who determine the collection, processing, or transfer of personal information. It prohibits these entities from engaging in such activities unless it's necessary and proportionate for legitimate purposes, like user authentication or security incident prevention. The act also bans deceptive advertising practices and restricts the processing of sensitive data, except in cases of legal compliance. Additionally, it outlines requirements for obtaining valid consent.
Original source