Law / United States /
Massachusetts
Security Breach statute, credit monitoring offer required
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
Commencement not set.
A breach notification rule binding public and private bodies.
As of 28 August 2026.
What it requires
- Offer at least 18 months of free credit monitoring to a Massachusetts resident whose Social Security number was disclosed, or reasonably believed disclosed, in a breach of security.
- If you are a consumer reporting agency that experienced the breach, offer not less than 42 months of free credit monitoring instead of 18.
- Do not require a resident to waive any right to a private right of action as a condition of the credit-monitoring offer.
If you get it wrong
Private right of actionNo
Who enforces it
Enforcement body
Massachusetts Attorney General, who may bring an action under ch. 93A sec. 4 to remedy a violation of chapter 93H; this chapter's own enforcement clause (sec. 6) does not itself deem a violation actionable under ch. 93A sec. 9
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
If a resident's Social Security number was disclosed or reasonably believed disclosed in a breach, the person or agency that experienced the breach must contract with a third party to offer that resident credit monitoring services at no cost for not less than 18 months. If the entity that experienced the breach is itself a consumer reporting agency, it must instead offer not less than 42 months of free credit monitoring.
The entity may not require a resident to waive any right to a private right of action as a condition of the credit-monitoring offer.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotautomated_outreach
Read the law
official Massachusetts General Laws text, Massachusetts Legislature
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.