The bill introduces CHAPTER 61, titled "Privacy Protections for Location Information Derived from Electronic Devices," to Title 6 of the General Laws, establishing regulations for the collection, processing, and disclosure of individuals' location information by covered entities. Covered entities include various organizations but exclude state or local government agencies and individuals acting in a non-commercial context. The bill mandates that these entities obtain informed consent from individuals before collecting their location data for permissible purposes, such as providing services, fulfilling transactions, or complying with legal obligations.

The chapter requires covered entities to maintain a location privacy policy that outlines their practices regarding the collection, processing, and disclosure of location information. It also establishes individuals' rights concerning their location information, including the right to opt out of targeted advertisements and the right to be informed of any changes to the location privacy policy.

Individuals may pursue civil actions against covered entities for violations of this chapter, with potential damages including actual damages, a minimum of $5,000 per violation, punitive damages, and reasonable attorney fees for successful plaintiffs. The bill prohibits retaliation against individuals exercising their rights and declares any contractual limitations on these rights as void and unenforceable.

The Department of Business Regulation is assigned the responsibility for promulgating rules and regulations necessary for the implementation, administration, and enforcement of this chapter. The legislation clarifies that it does not apply to location information collected by healthcare providers for specific purposes, provided such information is protected under the federal Health Insurance Portability and Accountability Act (HIPAA). Covered entities must obtain consent for any location information collected prior to the chapter's effective date and must permanently destroy any unconsented information within six months of enactment. The act will take effect upon passage.