Washington · statute · Wash. Rev. Code ch. 19.373 · 12 active provisions
(1) The legislature finds that the people of Washington regard their privacy as a fundamental right and an essential element of their individual freedom. Washington's Constitution explicitly provides the right to privacy. Fundamental privacy rights have long been and continue to be integral to protecting Washingtonians…
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.(1) "Abortion" means the termination of a pregnancy for purposes other than producing a live birth.(2) "Affiliate" means a legal entity that shares common branding with another legal entity and controls, is contr…
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall maintain a consumer health data privacy policy that clearly and conspicuously discloses:(i) The categories of consumer health data collected and the purpose for which the data is collecte…
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity or a small business may not collect any consumer health data except:(i) With consent from the consumer for such collection for a specified purpose; or(ii) To the extent necessary to provide a product or service tha…
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a consumer has the right to confirm whether a regulated entity or a small business is collecting, sharing, or selling consumer health data concerning the consumer and to access such data, including a list of all third parties and aff…
(1) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall:(a) Restrict access to consumer health data by the employees, processors, and contractors of such regulated entity or small business to only those employees, processors, and contractors for…
(1)(a)(i) Except as provided in subsection (2) of this section, beginning March 31, 2024, a processor may process consumer health data only pursuant to a binding contract between the processor and the regulated entity or the small business that sets forth the processing instructions and limit the actions the processor…
(1) Except as provided in subsection (6) of this section, beginning March 31, 2024, it is unlawful for any person to sell or offer to sell consumer health data concerning a consumer without first obtaining valid authorization from the consumer. The sale of consumer health data must be consistent with the valid authoriz…
It is unlawful for any person to implement a geofence around an entity that provides in-person health care services where such geofence is used to: (1) Identify or track consumers seeking health care services; (2) collect consumer health data from consumers; or (3) send notifications, messages, or advertisements to con…
The legislature finds that the practices covered by this chapter are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preservation of business, and is an unfair or de…
(1) This chapter does not apply to:(a) Information that meets the definition of:(i) Protected health information for purposes of the federal health insurance portability and accountability act of 1996 and related regulations;(ii) Health care information collected, used, or disclosed in accordance with chapter 70.02 RCW…
Chapter 191, Laws of 2023 may be known and cited as the Washington my health my data act.