MyMassGov privacy and security
Our priority is to safely manage your digital identity as used for accessing Commonwealth of Massachusetts resources, and to protect the personal information that you submit to create and update your MyMassGov account used to access them. When you provide details such as an email address or proof of identity like a state identification (ID), we need to be sure it’s really you and grant you (and only you) access to the account.
MyMassGov is not intended for use by individuals under the age of 13.
Information we collect and why we need it
- Basic account setup information: For authentication to establish a secure MyMassGov account, we need your name, email address, and a multifactor authentication (MFA) method. The authentication method can be a code sent to your phone number or an authenticator application.
- Detailed documentation of identity: Identity verification requires us to use more sensitive information, such as social security number (SSN), address, or phone number. Some agency partners may require you to provide documents to a third-party identity verification service, such as DocV from Socure. Individuals under the age of 18 will not be able to use the DocV service. You can read more about how these third parties verify your identity on their respective websites. MyMassGov shares data with these third parties only when you choose to verify your identity using their services, and then only to the extent necessary in accordance with this privacy notice and applicable law.
- Mobile service subscriber status and device details: During login or identity proofing, your phone carrier may disclose your mobile number, name, address, email, network status, customer type, customer role, billing type, mobile device identifiers (IMSI and IMEI) and other subscriber status and device details, if available, to our third party service provider, solely to verify your identity for the duration of the business relationship.
- Website Analytics and Improvements: MyMassGov measures performance and utilization information, like the pages you visit and the length of your session, which is collected into reports that help us better understand how the site is being used and how we can make it more helpful. No personally identifying user information is tied to this information and it is only shared anonymously with the MyMassGov team. We use browser cookies to enable collection of this information. Data about the types of services you use is anonymized (personal specifics like names are not included) and used to give us insights that help us improve the services the Commonwealth offers and do things like identify common overlap between services so that we can streamline the experience for users.
- Device information: When you access any internet or web resource, the device you use (and the software you use) necessarily provides make, model, and version information. We collect this information and use it to provide services and to detect and prevent misuse, e.g., through analysis of utilization trends and patterns.
Data sharing and storage
Massachusetts state agencies
MyMassGov partners with Massachusetts government agencies that need secure and private access to their websites, applications, and services.
View a list of participating agencies and their website applications.
When you create a MyMassGov account, you consent to share personally identifiable information (PII) and other personal data. The information that is shared depends on requirements of the agency you are accessing.
- Information is shared with other Massachusetts state agencies as necessary to detect and investigate suspected fraud, including providing you with restitution when appropriate.
- Massachusetts state agencies will receive information about you when you access their site. They use this information to:
- Give you access to their services
- Pre-fill parts of forms or applications
- Let you easily keep your information consistent and up to date
- Allow you to access services with a single login
- Help you if you ever have trouble with their websites
- Identify additional state services that may benefit you
- Learn about how Commonwealth of Massachusetts agencies can improve services to better serve you
To support new state agency applications adopting MyMassGov as their authentication gateway, MyMassGov may share information about which of the agency’s existing users already have a MyMassGov account; this information will include the email address associated with your profile.
Third parties
Please see a complete list of third party entities with whom information about you is shared.
MyMassGov, and our service providers, may also be required by law or through legal processes, such as a court order or subpoena, to share information with law enforcement agencies or other authorities.
MyMassGov does not sell the personal data held by our platform to any third-parties; data is not shared with third-parties except as described in this Privacy Notice.
Storage and maintenance of information
We store and maintain data in accordance with industry practices and the EOTSS Enterprise Information Security Policies and Standards.
Privacy Notice
The MyMassGov service is provided by the Executive Office of Technology Services and Security to offer the public secure and private online access to participating government programs and services. Our goal is to make managing state benefits, services, and applications faster, easier, and more secure.
In order to use MyMassGov, you must acknowledge and agree to this Privacy Notice. Your consent is recorded when you create your account, and MyMassGov may periodically ask you to review and re-confirm your consent, such as when there is an update to the language of the consent or this privacy notice.
Messaging terms and conditions
MyMassGov uses modern text messaging technology such as short message service (SMS) for multifactor authentication. We do not sell your information and will not use text or voice messaging for any other purpose without your explicit consent. Your service provider might charge you for these messages; MyMassGov is not responsible for such costs.
Relevant laws
The collection and use of data by MyMassGov is governed by MGL chapters 7D and 66A.
International User Notice
Notice to individuals accessing MyMassGov from outside of Massachusetts or from outside of the United States:
This resource is intended for use by individuals present in, or having substantial connections to, the Commonwealth of Massachusetts. Data provided by users outside of the United States will be transferred into the United States and processed under the laws of the Commonwealth of Massachusetts and the United States.
Privacy Notice summary
| Topic | Details |
|---|---|
| Organization Identity and Contact Details | MyMassGov is a service of the Commonwealth of Massachusetts. Questions about this notice may be directed to MyMassGov through this form. |
| Purpose and Legal Basis of processing personal data | MyMassGov collects and processes personal data for the purpose of identity authentication and management for users accessing online resource of participating agencies. MyMassGov has a legitimate interest in collecting this data for this purpose and also collects consent to use and share data as detailed in this document. |
| Recipients or categories of recipients of data | Data is shared with Massachusetts government agencies and third-party partners, as described in this document. |
| Transfer of personal data to a third country & the safeguards taken | Data is transferred into the United States and secured as described in this document. |
| Data retention period | MyMassGov retains account data for the life of the associated account. |
| Data Subject Rights, including right to access data, to withdraw consent, and to lodge complaints | MyMassGov users may view and update personal data held by the platform. MyMassGov users may withdraw consent at any time. MyMassGov users have the right to lodge complaints with their local governing authority. |
| Whether the provision of personal data is part of a statutory or contractual requirement or obligation and the possible consequences of failing to provide the personal data | MyMassGov cannot provide services to users who do not provide the required data. MyMassGov is a service for providing authenticated access to resources provided by Massachusetts government agencies; individuals who do not wish to provide data to MyMassGov may contact these agencies directly. |
| The existence of an automated decision-making system, including profiling, and information about how this system has been set up, the significance, and the consequences. | MyMassGov relies on third -parties to assist with authentication and verification. These resources may use automated decision-making to block access where potential fraud has been detected. In many situations, simply trying again after a brief waiting period of ten to twenty minutes will be sufficient to correct the issue. MyMassGov is a service for providing authenticated access to resources provided by Massachusetts government agencies; individuals who believe they have been incorrectly blocked from accessing MyMassGov may contact these agencies directly. |
Contact
Online
| Date published: | August 9, 2024 |
|---|---|
| Last updated: | March 4, 2025 |