Massachusetts Implements Landmark Data Privacy Law Affecting Tech Giants Statewide
BOSTON — On Monday, December 2, 2024, the Commonwealth of Massachusetts enacted a sweeping data privacy regulation, the Massachusetts Information Protection Act 2024, targeting major technology corporations operating within the state. The law, signed by Governor Maura Healey at the Massachusetts State House, mandates that companies such as Alphabet Inc. and Meta Platforms Inc. obtain explicit, opt-in consent from users before collecting, processing, or sharing personal data for advertising and other commercial purposes. This measure, effective immediately, imposes fines of up to 25 million US dollars for non-compliance, marking one of the strictest privacy rules in the United States. Officials from the Massachusetts Attorney General's Office confirmed that enforcement will begin with a 90-day grace period for compliance, focusing on firms with annual revenues exceeding 250 million dollars. The legislation follows a series of hearings held in Boston, addressing concerns over data breaches and user surveillance, positioning Massachusetts as a national leader in digital rights protection.