Massachusetts Consumer Data Privacy Act Bans Sale of Precise Location Data
Massachusetts enacted the Consumer Data Privacy Act banning sale of precise location data.
Why it matters: Legal and privacy professionals must adjust compliance strategies amid Massachusetts' enhanced consumer data restrictions. The law affects companies managing over 100,000 consumers' sensitive data and shapes evolving privacy standards nationwide.
- Massachusetts House passed the Consumer Data Privacy Act unanimously 146-0 on June 4, 2026.
- The law prohibits selling precise geolocation and other sensitive personal data without user consent.
- It applies to companies processing personal data of 100,000 or more consumers.
- The Massachusetts Senate approved the bill unanimously in September 2025.
On June 4, 2026, the Massachusetts House of Representatives voted 146-0 to approve the Consumer Data Privacy Act, a statute that bans the sale of precise cellphone location data — defined as exact GPS coordinates tracked by devices — along with other sensitive information without explicit user consent. The Senate had previously passed a similar bill unanimously in September 2025, building consensus on the legislation.
The law targets companies that process personal data of at least 100,000 consumers. It prohibits not only selling exact location data but also biometric details, health records, genetic information, fingerprints, and details related to religion, immigration status, or sexual orientation. These categories are designed to protect individuals from unauthorized tracking, exploitation, or discriminatory uses.
Senate President Karen E. Spilka highlighted the risks of commercializing personal data, stating that selling consumer information "to the highest bidding tech billionaire" endangers individuals' privacy and safety. Carol Rose, Executive Director of the ACLU of Massachusetts, noted that unrestricted sales of location data expose people to potential exploitation, harassment, or violence.
The bill's final step is the governor's signature; no official date has been announced. Once enacted, the law will enhance Massachusetts' leadership on consumer data protections and may influence other states developing similar privacy frameworks.
Legal professionals should promptly reassess data handling and consent mechanisms to ensure compliance. The act adds to a growing national patchwork of laws increasing obligations on businesses that collect and sell granular consumer data.
By the numbers:
- 146-0 — House vote margin on June 4, 2026
- 100,000+ consumers — Threshold for company data coverage under the law
- September 2025 — Date Massachusetts Senate unanimously approved the bill
Yes, but: While the Act significantly tightens data sale restrictions, enforcement details and penalties are still forthcoming, which could affect practical compliance timelines.
What's next: Governor expected to sign the Consumer Data Privacy Act; legal guidance and enforcement rules anticipated following enactment.