The Massachusetts Consumer Privacy in Commercial Transactions Act, or simply the Act, places restrictions on how companies can request and collect personal identification information, or PII, that isn't necessary for a transaction. Although the Act predates online retail and doesn't specifically mention e-commerce, it's now being applied to online practices as privacy litigation trends evolve. This law allows individuals to take legal action and sets statutory damages at $25 for each violation. If a violation is found to be willful, the damages can triple.

Read the article.

About the authors:
Taylor Ey, CIPP/US, CIPP/E
William Carter, CIPP/US