An Act relative to protecting sensitive information from security breaches

This bill updates Massachusetts data privacy laws by expanding the definition of "personal information" to include biometric data, genetic information, and specific geolocation coordinates. It also clarifies what constitutes a security breach, defining it as the unauthorized access to unencrypted data or encrypted data where the encryption key is compromised. Additionally, the legislation adds new definitions for genetic, health insurance, and medical information to ensure these sensitive categories are protected under existing privacy statutes. These changes directly affect businesses and organizations that collect or store such data, requiring them to adhere to the broader scope of information considered protected.