Unanimous 146-0 in the House. 40-0 in the Senate. Massachusetts just told the data brokerage industry its location-data-for-sale business model is dead inside the state's borders.
That's not a tweak to existing privacy law — it's a straight-up ban on selling precise geolocation data. No consent, no sale. The Massachusetts Consumer Data Privacy Act also covers biometrics, health data, genetic info, fingerprints, religion, immigration status, and sexual orientation. But the location data piece is the one that's going to make ad-tech and data brokers sweat.
Why Location Data Matters More Than the Rest
Data brokers have been buying app-location feeds for years, repackaging them, and selling to anyone with a credit card — stalkers, divorce lawyers, immigration enforcement, even military intelligence. The US government has repeatedly argued it doesn't need a warrant to buy commercially available location data. That loophole just got nailed shut in Massachusetts.
By applying the ban to both residents and visitors, the law creates a geographic bubble where location data cannot be sold. Any company that collects precise location from someone physically present in Massachusetts now needs explicit opt-in consent before selling or sharing it. Compliance is not optional — the threshold is handling data of more than 100,000 consumers, which catches medium-sized startups and every big tech player.
Privacy as Default, Not Opt-Out
Massachusetts joins a growing patchwork of state privacy laws that fill the void left by the absence of a federal US privacy statute. Unlike the California Consumer Privacy Act (CCPA), which grants rights to access and delete but still allows data sale under an opt-out regime, Massachusetts goes further by prohibiting sale of specific sensitive categories without explicit consent.
Evan Greer of Fight for the Future called it "a major step toward cracking down on Big Tech’s surveillance abuses." The ACLU praised the bill as positioning Massachusetts as a leader in curbing digital surveillance. The bill passed unanimously — a rare sight in today's polarized politics — because both parties agreed privacy is a fundamental right for state residents.
What Happens Next
The House and Senate bills are now being merged, then sent to the Governor for signature. That's expected to happen without drama. Once signed, the law will apply to every company touching location data in Massachusetts — from ad exchanges to delivery apps to data brokers. The downstream effect on the national data market will be immediate: any dataset that can't prove Massachusetts users gave explicit consent to sell their location becomes legally toxic.
Startups building location-based services should audit their data pipelines now. The ban on selling precise location data is no longer theoretical — it's law in a state that hosts hundreds of tech companies and millions of connected devices.
Source: Massachusetts votes to pass new privacy rights bill that bans sale of precise location data
Domain: techcrunch.com
Comments load interactively on the live page.