An Act establishing the Massachusetts Data Privacy Protection Act

This bill establishes the Massachusetts Data Privacy Protection Act to regulate how businesses collect, process, and share personal information about residents. It defines specific terms like "covered data" and "covered entities," while exempting small businesses with low revenues and limited data collection from these rules. The legislation requires companies to obtain clear consent from individuals before using their data and outlines strict security measures for protecting sensitive information such as biometric data. Additionally, it imposes special obligations on large social media platforms with significant revenue and user bases regarding how they handle user information.