Your phone knows where you are. It tracks your commute, your doctor visits, and your late-night stops. For years, that data has been a commodity. Now, Massachusetts is trying to shut that market down.

In a unanimous 146-0 vote on Thursday, the Massachusetts House passed the Consumer Data Privacy Act. It follows a similar 40-0 vote in the Senate last September. The two chambers are now merging their versions for the governor’s signature. It is a rare moment of total legislative alignment. Privacy is now a state priority.

The End of the Location Marketplace

The bill’s most significant provision is a blanket ban on the sale of precise geolocation data. This isn't just about ads. It’s about the entire data broker ecosystem.

For years, app developers have sold user coordinates to third-party brokers. Those brokers repackage the information. They sell it to the highest bidder. This includes governments, militaries, and even private actors. Often, no warrant is required. The data is simply bought on the open market.

Massachusetts is changing the rules. The law applies to anyone within state lines, resident or visitor. If you are in the state, your location is no longer for sale. It is a bold move. It effectively breaks the business model for companies that rely on tracking people to turn a profit.

A Patchwork of Protection

The United States lacks a federal privacy law. That is a problem. In the absence of Washington, states have stepped in. California led the charge. Now, Massachusetts is following suit.

This bill targets companies processing data for more than 100,000 consumers. It hits the giants. It also hits the mid-sized startups. Under the new rules, companies cannot share or sell sensitive information without explicit consent. This covers more than just location. It includes biometrics, religious affiliation, and immigration status.

Why This Matters for Big Tech

Silicon Valley has long treated data as an infinite resource. That era is ending. By requiring explicit opt-ins for sensitive data, the Massachusetts bill forces a shift in product design. Companies can no longer hide data-sharing practices in dense terms of service agreements.

Privacy advocates are celebrating. The ACLU called the bill a landmark achievement. Evan Greer of Fight for the Future described it as a major strike against surveillance. The industry, however, will face a compliance headache. They must now map their data flows with precision. They must verify user consent at every turn.

Key Takeaways

  • The Location Ban: Massachusetts will prohibit the sale of precise geolocation data for anyone within the state, effectively ending the local market for such information.
  • Scope of Impact: The law applies to any entity processing data for more than 100,000 consumers, forcing both tech giants and startups to overhaul their data-sharing practices.
  • Sensitive Data Protections: Companies must now obtain explicit consent before sharing biometrics, religious markers, or immigration status, moving beyond simple "opt-out" models.

The Next Regulatory Hurdle

Federal efforts to regulate data sales have stalled. The Biden administration previously considered a ban on selling sensitive data to foreign adversaries, but that initiative was scrapped. Massachusetts is now the primary battleground.

What happens next depends on the governor’s desk. Once signed, the implementation phase begins. Companies will have to decide: do they change their global practices to comply with Massachusetts, or do they build a walled garden specifically for the state? The answer will likely define the next chapter of digital privacy in America.