An Act establishing the Massachusetts Information Privacy and Security Act

This bill establishes the Massachusetts Information Privacy and Security Act to strengthen data protection rules for businesses handling personal information. It creates strict definitions for key terms like "consent" and "dark patterns," requiring companies to obtain clear, unambiguous permission from individuals rather than relying on vague terms of service or confusing website designs. The legislation specifically targets data brokers by setting higher thresholds for what constitutes illegal data collection and sale, particularly regarding biometric and geolocation data. Additionally, the act expands protections for children under 13 and clarifies how affiliates and related entities must manage shared personal information.