Massachusetts data privacy rights and data broker removal (2026)
| Comprehensive privacy law? | No comprehensive law |
|---|---|
| Honors Global Privacy Control? | Not required |
| Data-broker registry? | No |
| Enforced by | Massachusetts Attorney General (consumer protection under ch |
How to exercise your rights
Residents rely on the strong data-security regulations (201 CMR 17.00, which require written information-security programs), breach notification (ch. 93H), and the ch. 93A consumer-protection statute (which has a private right of action for unfair/deceptive practices). They can submit opt-out/deletion requests to CCPA-covered and other-state-registered data brokers and enable the Global Privacy Control. No Massachusetts mechanism provides comprehensive access/deletion/opt-out rights against ordinary businesses.
Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.
Special protections
Strong data-security regulations (201 CMR 17.00) requiring comprehensive written information-security programs — among the most prescriptive in the U.S. Breach notification (ch. 93H). Address Confidentiality Program administered by the MA Secretary of the Commonwealth for survivors of domestic violence/stalking. No Daniel's-Law-style statute identified.
How to file a complaint
Massachusetts Attorney General, Consumer Advocacy & Response Division — https://www.mass.gov/how-to/file-a-consumer-complaint
Recent updates (2025–2026)
Comprehensive privacy bills (e.g., the Massachusetts Data Privacy Act / Information Privacy and Security Act) have been actively debated but none enacted as of 2026.
Frequently asked questions
Does Massachusetts have a data privacy law?
Massachusetts has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.
How do I remove my information from data brokers in Massachusetts?
Residents rely on the strong data-security regulations (201 CMR 17.00, which require written information-security programs), breach notification (ch. 93H), and the ch. 93A consumer-protection statute (which has a private right of action for unfair/deceptive practices). They can submit opt-out/deletion requests to CCPA-covered and other-state-registered data brokers and enable the Global Privacy Control. No Massachusetts mechanism provides comprehensive access/deletion/opt-out rights against ordinary businesses.
Can I sue for privacy violations in Massachusetts?
Massachusetts Attorney General (consumer protection under ch. 93A; breach/security under ch. 93H and 201 CMR 17.00). Ch. 93A provides a PRIVATE RIGHT OF ACTION for unfair/deceptive practices (with potential multiple damages and attorneys' fees).
Does Massachusetts have a data broker registry?
No. Massachusetts does not have a dedicated data-broker registry, but you can still opt out of brokers directly.
Sources
- https://www.mass.gov/how-to/file-a-consumer-complaint
- https://www.mass.gov/regulations/201-CMR-1700-standards-for-the-protection-of-personal-information-of-residents-of-the-commonwealth
- https://iapp.org/resources/article/us-state-privacy-legislation-tracker
Find out what data brokers know about you
Run a free scan to see which sites are exposing your personal information — name, phone, address, email, and more.
Start your free scan →