[zdragnar]

I see- I didn't realize the opening bit of your question was a non-sequitur.

Yes, Massachusetts may enforce the law within its own borders. Companies which buy or sell location data may not operate in Massachusetts without risking enforcement actions. If someone with a company's app travels through MA, their location data may likely still be sold if the company itself is not registered at all in MA.

HOWEVER, the law must also survive the inevitable federal court challenge when a company headquartered in another state, but with some small operating presence in MA, falls under some enforcement action... rendering the original question entirely moot, as I suspect there are no shortage of companies who would challenge the law.

[fsckboy]

in this case it's your non sequitur which is non sequitur. Mine was the basis of my question.