MA H1926

Regulates data collection by landlords and third parties operating "smart access systems" (keycard, mobile app, biometric entry systems) in multiple dwellings with 3+ units in Massachusetts

Requires express written consent from tenants before collecting reference data, limits collection to minimum necessary information, and mandates destruction of authentication data within 90 days

Prohibits selling, leasing, or disclosing tenant data except for court orders, emergencies, or authorized third-party operators; bans using data to track tenants outside buildings, harass tenants, or facilitate evictions

Requires landlords to provide tenants written privacy policies detailing data collected, retention schedules, security protocols, and third-party sharing arrangements

Creates private right of action in superior court with damages of $200-$1,000 per violation (or compensatory/punitive damages), plus attorneys' fees; Executive Office of Housing and Livable Communities must publish information on its website