{"id":275306,"date":"2026-06-17T15:31:00","date_gmt":"2026-06-17T19:31:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/17\/one-step-closer-to-a-massachusetts-data-privacy-law-comparing-the-current-house-and-senate-bills-state-ag-insights\/"},"modified":"2026-06-18T05:41:08","modified_gmt":"2026-06-18T09:41:08","slug":"one-step-closer-to-a-massachusetts-data-privacy-law-comparing-the-current-house-and-senate-bills-state-ag-insights","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/17\/one-step-closer-to-a-massachusetts-data-privacy-law-comparing-the-current-house-and-senate-bills-state-ag-insights\/","title":{"rendered":"One Step Closer to a Massachusetts Data Privacy Law: Comparing the Current House and Senate Bills | State AG Insights"},"content":{"rendered":"

One Step Closer to a Massachusetts Data Privacy Law: Comparing the Current House and Senate Bills | State AG Insights<\/a><\/p>\n

https:\/\/foleyhoag.com\/news-and-insights\/blogs\/state-ag-insights\/2026\/june\/one-step-closer-to-a-massachusetts-data-privacy-law-comparing-the-current-house-and-senate-bills\/<\/a><\/p>\n

Publish Date: 2026-06-17 15:31:00<\/a><\/p>\n

Source Domain: foleyhoag.com<\/a><\/p>\n\nApplicability <\/span><\/span><\/span><\/span><\/td>\nPersons conducting business in Massachusetts and producing products\/providing services targeting Massachusetts residents that in the year prior: <\/span><\/span><\/span><\/span><\/p>\n

    \n
  1. Collected\/processed data of \u2265100,000 consumers; <\/span><\/span><\/span><\/span><\/li>\n
  2. Derived gross revenue of \u2265$100,000 from personal data sales; <\/span><\/span><\/span><\/span><\/li>\n
  3. Collected\/processed any sensitive data<\/span><\/span><\/span><\/span><\/li>\n<\/ol>\n<\/td>\nPersons that in the prior year: <\/span><\/span><\/span><\/span><\/p>\n
      \n
    1. Collected\/processed data of \u226560,000 consumers; <\/span><\/span><\/span><\/span><\/li>\n
    2. Collected\/processed personal data of \u226520,000 and derived 20% gross revenue from personal data sales; <\/span><\/span><\/span><\/span><\/li>\n
    3. Collected\/processed\/transferred reproductive\/sexual health data<\/span><\/span><\/span><\/span><\/li>\n<\/ol>\n<\/td>\n<\/tr>\n\nPrivate Right of Action<\/span><\/span><\/span><\/span><\/td>\nPrivate right of action against large data holders via 93A; no private right of action for non-large data holders (exclusive AG enforcement)<\/span><\/span><\/span><\/span>
      \n\t\t\t\u201cLarge data holder\u201d is defined as a controller or processor that in the most recent calendar year collected, processed, or sold:<\/span><\/span><\/span><\/span>
      \n\t\t\t(1) personal data of more than two million consumers (excluding personal data collected and processed solely for billing); or <\/span><\/span><\/span><\/span>
      \n\t\t\t(2) sensitive data of more than 200,000 consumers.<\/span><\/span><\/span><\/span><\/td>\nNo private right of action \u2014only AG has enforcement powers<\/span><\/span><\/span><\/span><\/td>\n<\/tr>\n\nData Minimization<\/span><\/span><\/span><\/span><\/td>\nCollection of personal data should be \u201creasonably necessary and proportionate \u2026 consistent with the reasonable expectation of the consumer,\u201d evaluated by a four-factor balancing test.<\/span><\/span><\/span><\/span><\/td>\nCollection of personal data should be \u201creasonably necessary to provide or maintain a specific product or service.\u201d <\/span><\/span><\/span><\/span><\/td>\n<\/tr>\n\nSensitive Data \u2014 Definition<\/span><\/span><\/span><\/span><\/td>\n\n