An Act to establish the Massachusetts data privacy protection act

This bill proposes creating the Massachusetts Data Privacy Protection Act to regulate how businesses collect and handle personal information. It directly affects companies that process data about individuals, excluding small businesses with low revenues and those that only process data for payment transactions. The law defines key terms like "covered data" and "covered entities," requiring organizations to obtain clear consent before collecting certain information and establishing rules for the use of biometric data and automated decision-making systems. By setting specific thresholds for revenue and data volume, the legislation aims to impose privacy obligations primarily on larger commercial entities while exempting smaller operations and government agencies.