This browser is not actively supported anymore. For the best passle experience, we strongly recommend you upgrade your browser.
Insights Insights
| 1 minute read

Washington "My Health My Data Act" Goes to Governor after Passing Legislature

Washington state is poised to enact legislation that -- while billed as a health privacy law -- actually encompasses an extremely broad range of information. The law, which will cover many entities doing business with Washington consumers, protects health information, biometric data, and genetic data and allows consumers the same kinds of rights we have seen in European-style comprehensive privacy laws. Most importantly, the law allows for a private right of action for violations. The law should take effect in the spring of 2024 (summer 2024 for small businesses).  

Why It Matters

The scope of the new Washington law makes it fairly broad in potential application.  Fitness, wellness, and cosmetic services could fall within its ambit; so could authentication systems in use in employment and security settings; and so could M&A activity that involves sale of data covered. Businesses that collect or use any of the data described by the Act should start now on the process of compliance, which will require a separate privacy notice and specific consent procedures, as well as back-end processes to handle consumer access/deletion requests.  Because of the broad scope of information covered, it is prudent to seek to advice on whether this law applies or could apply to your business.  

House Bill 1155, the My Health My Data Act, would grant consumers the right to access, delete and withdraw consent from the collection, sharing or sale of their health data and includes express consent requirements for collecting, sharing and selling consumer health information. It would require companies to implement a detailed health data policy and prohibit implementing a geofence around a facility providing in-person health care services.


data security and privacy, hill_mitzi, insights, health care