MA S1108

Creates a civil cause of action in superior court for victims of malicious doxing, allowing plaintiffs to sue when someone knowingly disseminates their personal information (home address, phone number, SSN, email, school/work location) with intent to cause harassment, stalking, death, or bodily injury

Requires plaintiffs to prove by preponderance of evidence that dissemination was without consent, done with malicious intent, and either poses an imminent threat, results in actual harm, or would cause a reasonable person to fear harm

Allows prevailing plaintiffs to recover actual damages, punitive damages, injunctive relief, and reasonable attorney fees, with enhanced damages when doxing includes sensitive information about race, immigration status, sexual orientation, health conditions, or involvement in reproductive/gender-affirming healthcare

Exempts interactive computer services, telecommunications providers, VPNs, and cable operators from liability when they are merely hosting content provided by others

Protects dissemination of information for reporting unlawful conduct, exercising free speech and assembly rights, or petitioning government, with a 2-year statute of limitations