Security Breach statute, Attorney General enforcement

Mass. Gen. Laws ch. 93H, § 6

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Commencement not set.

An enforcement supervision rule binding public and private bodies.

As of 28 August 2026.

What it requires

Expect ch. 93H's own enforcement clause to arm only the Massachusetts Attorney General; look to 940 CMR 3.16(3), not this section, for the route by which a private plaintiff may sue over a breach-notice violation.

If you get it wrong

Private right of actionNo

Who enforces it

Enforcement body

Massachusetts Attorney General, who may bring an action under ch. 93A sec. 4 to remedy a violation of chapter 93H

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Chapter 93H's own enforcement clause lets the Attorney General bring an action under ch. 93A section 4 to remedy a violation. On its own face, this section creates no private right of action: it does not deem a ch. 93H violation to be an unfair or deceptive practice actionable by a private plaintiff under ch. 93A section 9. A private right of action for a ch. 93H violation exists only through a separate Attorney General regulation, 940 CMR 3.16(3).

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

official Massachusetts General Laws text, Massachusetts Legislature

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app