The Massachusetts Gaming Commission recently approved new Sports Wagering Data Privacy Rules that will likely require companies to implement new policies to protect their customer’s personal information.
The rules, which became effective on September 1, 2023, share several similarities with the California Privacy Rights Act (CPRA) and Colorado Privacy Act (CPA). Still, they also include a few unique directives that must be considered.
Here is what do you need to know:
The definition of “personally identifiable information” is broad and tracks CPRA and other state laws, including information which is “reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular patron, individual or household.”

