Mass. Gen. Laws ch. 159A1/2, § 12 – Transportation network company pre-arranged ride data; confidential data-sharing agreements

(a) On the first day of each month, each transportation network company shall submit to the division, in a format approved by the division, data related to each pre-arranged ride provided in the month prior to the previous month and shall include for each pre-arranged ride:
(i) the latitude and longitude for the points of the origination and termination, calculated to 0.001 decimal degrees;
(ii) the date and time of the origination and termination, calculated to the nearest minute;
(iii) the total cost paid by the rider for the ride;
(iv) the universally-unique identifier associated with the transportation network driver;
(v) the transportation network driver's city or town of residence as appearing on the driver's license;
(vi) whether the rider requested a shared ride but was not successfully matched with another rider;
(vii) whether the rider requested accommodation for special needs;
(viii) whether the ride was provided by a wheelchair accessible vehicle;
(ix) whether there were any driver or rider-initiated cancellations;
(x) the total time that the transportation network driver spent on the way to pick up the rider;
(xi) the total time that the transportation network driver spent providing the pre-arranged ride;
(xii) the geographic position of the vehicle during the entire duration of the pre-arranged ride, provided at intervals of not less than every 60 seconds of the pre-arranged ride;
(xiii) the total mileage driven by the transportation network driver while on the way to pick up the rider;
(xiv) the total mileage driven by the transportation network driver while providing the pre-arranged ride;
(xv) the transportation network vehicle license plate;
(xvi) whether the transportation network driver is a professional driver, as advertised by the transportation network company; and (xvii) whether the pre-arranged ride was advertised by the transportation network company as a luxury or premium ride, regardless of whether the transportation network vehicle was registered as a livery vehicle; provided, however, that if the pre-arranged ride was advertised by the transportation network company as a luxury or premium ride, the data shall include the factors that were considered in that designation, including, but not limited to, vehicle make, model, year and, if available, trim, whether the transportation network driver was a professional driver, as advertised by the transportation network company, and whether the ride was available by an exclusive membership option.
(b) The division may obtain additional ride data from a transportation network company for the purposes of congestion management, which may include, but shall not be limited to:
(i) the total number of transportation network drivers that utilized the transportation network vehicle's digital network within specified geographic areas and time periods as determined by the division; and (ii) the total time spent and total miles driven by transportation network drivers in such geographic areas or time periods as determined by the division while:
1. (A) on the way to pick up a rider; or (B) engaged in a pre-arranged ride. The division shall promulgate regulations relative to data collection pursuant to this subsection prior to obtaining the data.
2. (c) Annually, not later than June 30, the division shall post on its website, in aggregate form, the total number of rides provided by all transportation network companies that originated in each city or town, each city or town where the rides originating in each city or town terminated and the average miles and minutes of the rides that originated in each city or town and terminated in each other respective city or town.
3. (d) For the purposes of congestion management, transportation planning or emissions tracking, the division may enter into confidential data-sharing agreements to share de-identified trip-level data received by the division pursuant to this section with the executive office of technology services and security, the executive office of energy and environmental affairs, the Massachusetts Department of Transportation, the Massachusetts Port Authority, the Massachusetts Bay Transportation Authority, the department of environmental protection, a regional transit authority established under section 3 of chapter 161B, a regional planning agency and a metropolitan planning organization. The division shall prescribe the form and content of a confidential data-sharing agreement pursuant to this subsection, the manner of transmitting the information and the information security measures that shall be employed by an entity receiving the data under any such data-sharing agreement. A confidential data-sharing agreement shall specify that the information provided by the division shall be aggregated and de-identified and may be used only for the purposes set forth in the agreement. Any data received by an entity from the division through a confidential data-sharing agreement under this subsection shall not be considered a public record under clause Twenty-sixth of section 7 of chapter 4 or chapter 66 and shall not be disclosed to any person or entity other than those listed or described in the confidential data-sharing agreement; provided, however, that a state or municipal government agency or transportation planning entity may disclose conclusions and analyses derived from the information and from the data received pursuant to a confidential data-sharing agreement.
4. (e) A violation of the terms of a confidential data-sharing agreement by an entity listed in subsection (d) may result in the division declining to enter into future confidential data-sharing agreements with the violating entity and in the termination of any existing data-sharing agreement with the entity. The division shall notify each transportation network company whose data was shared in violation of the terms of a confidential data-sharing agreement of the violation, the violating entity and what data was shared. An entity listed in subsection (d) that violates the terms of a confidential data-sharing agreement shall destroy all data received as a result of the confidential data-sharing agreement.