An Act relative to protecting sensitive information from security breaches

This bill updates Massachusetts data privacy laws by expanding the types of sensitive information that require protection. It specifically adds new definitions for biometric data, genetic information, and precise geolocation data to the list of personal information that must be secured. Additionally, the legislation clarifies what constitutes a security breach, defining it as the unauthorized access to unencrypted data or encrypted data where the encryption key has been compromised. These changes aim to ensure that organizations handling these specific categories of data have stronger obligations to safeguard them against theft or misuse.