Should Massachusetts let residents sue companies that mishandle their personal data?
The Massachusetts Data Privacy Act (S. 2619) would create the state's first comprehensive consumer privacy law, limiting how much personal data companies can collect and how they use it. After unanimous votes in both chambers, a conference committee is now deciding whether to keep the House-added "private right of action" that would let residents sue large data holders directly. Supporters say strong limits plus a right to sue give the law teeth; opponents warn it could spark settlement-driven lawsuits that burden businesses. Where do you stand?
Weigh in
The case for
Supporters say data-minimization limits (collecting only what a service needs) plus a private right of action are what make a privacy law real, letting residents act when large companies misuse their data instead of relying only on state enforcement that can be under-resourced. They point to the unanimous votes in both chambers as evidence of broad agreement that residents deserve control over their information.
Source: Consumer Reports (support letter, consumer) →The case against
Business groups argue a private right of action invites settlement-driven litigation and a "cottage industry" of lawsuits that fall hardest on smaller firms, while rigid data-minimization rules could hamper the state's innovation economy. They favor enforcement by the attorney general over private suits, arguing there is little evidence such suits produce better outcomes for consumers.
Source: Greater Boston Chamber of Commerce (business, opposes House version) →My Democracy doesn’t take a side — you choose your position below, and your message carries it. Sources represent one organization on each side; they don’t reflect My Democracy’s position.
10 more to reach 10
Take Action
What’s your position?
Both sides are laid out above. Your message will carry your position — My Democracy doesn’t take a side.