United States of America: Introduction of Massachusetts bill including data protection measures

House Docket 2664 is introduced in the Massachusetts House of Representatives, aiming to establish the "Massachusetts information privacy act". The Bill regulates any business that processes personal data with at least 10 million dollars of annual revenue or that yearly processes the personal information of at least 10'000 individuals. The Bill introduces the rights of data access, correction, portability, and deletion. Moreover, the Bill requires obtaining the consent of consumers before collecting and processing their personal data and limits the processing practices as concerns biometric and location data. Finally, the Act establishes the "Massachusetts information privacy commission", which has the power to conduct investigations, conduct adjudicatory proceedings, promulgate regulations regarding the subjects of the Act and refer cases for prosecution to the federal or local authorities.