Does Massachusetts have a comprehensive privacy law? No. As of November 4, 2026, Massachusetts has not enacted a comprehensive consumer privacy law; S.2619, the Massachusetts Data Privacy Act, has been in a House-Senate conference committee since June 17, 2026.
- Status: In Committee
- Law: No comprehensive law. Main bill: S.2619 (2025-2026), the Massachusetts Data Privacy Act; passed by the Senate and, amended, by the House; in conference committee since June 2026
- Signed: Not applicable (no comprehensive law) · Effective: Not applicable (no comprehensive law)
- Applies to: Not applicable (no comprehensive law)
- Cure period: Not applicable (no comprehensive law)
- Enforcement: Not applicable (no comprehensive law)
- Last verified: November 4, 2026 · Official source: Massachusetts Legislature, S.2619
- Related: Massachusetts data privacy law (MIPSA) explained
The Massachusetts Senate passed S.2619, An Act establishing the Massachusetts data privacy act, by a vote of 40 to 0 on September 25, 2025. The House passed its own amended version (H.5479) by 146 to 0 on June 4, 2026. On June 11, 2026, the Senate did not concur in the House amendment and appointed conferees, and on June 17, 2026, the House insisted on its amendment and appointed its own conferees. As of November 4, 2026, the bill history shows no conference report, no enactment, and no action by the Governor.
Until a final version is enacted, the bill’s thresholds, cure period, and penalties are not settled. For the bill’s main provisions and the state’s existing data security rules, read our guide to the Massachusetts Data Privacy Law (MIPSA).