Massachusetts lawmakers unanimously passed the landmark Consumer Data Privacy Act on Thursday to shield residents and visitors from big tech surveillance by banning the commercial sale of precise location data.
A Unanimous Legislative Push Against Big Tech
The House of Representatives secured a historic 146-0 vote, following a unanimous 40-0 Senate vote in September. The two versions of the legislation will now be combined in the Senate before heading to the state governor’s office for signing. Although the exact timeline for the governor’s signature remains unconfirmed, the bill is widely expected to be enacted into law.
Bridging the US Federal Privacy Void
With this decisive move, Massachusetts joins a growing list of US states establishing their own individual privacy frameworks. Unlike most major global democracies, the United States lacks a comprehensive federal privacy law. Consequently, individual states have stepped forward to create a patchwork of regional regulations to curb documented abuses across the technology, social media, and advertising sectors.
Which Businesses Are Affected?
Once enacted, the regulations will target any company processing or handling the personal data of more than 100,000 consumers. This threshold means the rules will impact not only Silicon Valley tech giants but also various medium-sized startups operating within the state.
Strict Consent Rules for Sensitive Data
Under the new legal framework, businesses are strictly prohibited from sharing or selling sensitive user information without explicit, opt-in consent. This protected class of information includes:
- Biometric data (such as fingerprints, genetic profiles, and health metrics)
- Precise geolocation records
- Personal markers regarding religious beliefs, immigration status, and sexual orientation
The Crackdown on Location Data Brokers
The unregulated sale of location data has long been a highly contentious issue in digital privacy debates. For years, data brokers have purchased location coordinates harvested by mobile apps, repackaging and selling this sensitive information to commercial buyers, stalkers, and even government agencies or militaries. Notably, federal agencies often bypass warrant requirements by simply purchasing this commercially available tracking data on the open market.
While the Biden administration previously attempted to implement a federal ban on selling sensitive American data, the initiative was subsequently discarded by the Trump administration.
Broader Implications for the Tech Industry
Because the Massachusetts ban applies to both permanent residents and temporary visitors, it effectively establishes a blanket prohibition on location data sales across the entire state. Consequently, the legislation is anticipated to have a broad effect on startups that rely on harvesting, sharing, or selling location metrics, as well as digital advertisers using geographic targeting.
According to reports by local media outlet WBUR and the Lynn Journal, lawmakers worked across party lines, driven by the shared conviction that digital privacy is a fundamental right.
Praise from Privacy Advocates
The legislative milestone has received widespread acclaim from digital rights groups. Evan Greer, director of the advocacy group Fight for the Future, remarked that the bill “took a major step toward cracking down on Big Tech’s surveillance abuses”. Meanwhile, the ACLU lauded the landmark legislation, stating it positions Massachusetts as a “leader in protecting personal privacy and curbing digital surveillance.”