Massachusetts data privacy rights and data broker removal (2026)
How to exercise your data privacy rights in Massachusetts, opt out of data brokers, and file a complaint — updated for 2026.
At a glance
- Comprehensive privacy law? No. Your rights come from the statutes below.
- Honors Global Privacy Control? Not required
- Data-broker registry? No
- Enforced by Massachusetts Attorney General (consumer protection under ch
What Delist can do for you in Massachusetts
Massachusetts has no comprehensive privacy law in effect. We submit your requests through each broker's own opt-out channel, on your behalf. Many national brokers honor these requests wherever you live, but none is required to by Massachusetts law, so we follow up and re-file rather than assume.
How the three groups work: our authorized-agent framework.
What still protects you
Massachusetts has no comprehensive consumer privacy law, but it offers unusually strong data-security regulations (201 CMR 17.00), breach notification (ch. 93H), and a consumer-protection statute (ch. 93A) with a private right of action for unfair/deceptive practices. Residents can use opt-outs to CCPA-covered and other-state-registered data brokers and GPC, but cannot compel access/deletion/opt-out from most businesses under a comprehensive state law.
How to exercise your rights
Residents rely on the strong data-security regulations (201 CMR 17.00, which require written information-security programs), breach notification (ch. 93H), and the ch. 93A consumer-protection statute (which has a private right of action for unfair/deceptive practices). They can submit opt-out/deletion requests to CCPA-covered and other-state-registered data brokers and enable the Global Privacy Control. No Massachusetts mechanism provides comprehensive access/deletion/opt-out rights against ordinary businesses.
Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.
Special protections
Strong data-security regulations (201 CMR 17.00) requiring comprehensive written information-security programs — among the most prescriptive in the U.S. Breach notification (ch. 93H). Address Confidentiality Program administered by the MA Secretary of the Commonwealth for survivors of domestic violence/stalking. No Daniel's-Law-style statute identified.
How to file a complaint
Massachusetts Attorney General, Consumer Advocacy & Response Division — https://www.mass.gov/how-to/file-a-consumer-complaint
Recent updates (2025–2026)
Comprehensive privacy bills (e.g., the Massachusetts Data Privacy Act / Information Privacy and Security Act) have been actively debated but none enacted as of 2026.
Frequently asked questions
Does Massachusetts have a data privacy law?
Massachusetts has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.
How do I remove my information from data brokers in Massachusetts?
Residents rely on the strong data-security regulations (201 CMR 17.00, which require written information-security programs), breach notification (ch. 93H), and the ch. 93A consumer-protection statute (which has a private right of action for unfair/deceptive practices). They can submit opt-out/deletion requests to CCPA-covered and other-state-registered data brokers and enable the Global Privacy Control. No Massachusetts mechanism provides comprehensive access/deletion/opt-out rights against ordinary businesses.
Who enforces privacy law in Massachusetts?
Massachusetts Attorney General (consumer protection under ch. 93A; breach/security under ch. 93H and 201 CMR 17.00). Ch. 93A provides a PRIVATE RIGHT OF ACTION for unfair/deceptive practices (with potential multiple damages and attorneys' fees).
Does Massachusetts have a data broker registry?
No. Massachusetts does not have a dedicated data-broker registry, but you can still opt out of brokers directly.
Sources
Also in this state
Find out what data brokers know about you
A free scan shows which sites are exposing your name, phone, address and email, and Delist files the removals for you.