Effective 2024-03-31
WA My Health My Data Act
Scope: Regulates collection, sharing, and sale of consumer health data by non-HIPAA-covered entities, applies to many AI health and wellness systems, and requires consent and a consumer health data privacy policy.
Key triggers / concepts
Enforcement authority
Washington Attorney General (plus private right of action via Consumer Protection Act)
Penalties
Up to $7,500 per violation under WA Consumer Protection Act; private right of action available