My Health My Data Act
Washington My Health My Data Act
Washington · RCW ch. 19.373
- Status
- In effect
- Took effect
- March 31, 2024
- Applies to
- Regulated entities doing business in Washington that collect consumer health data (includes AI-derived health inferences)
- Enforced by
- Washington Attorney General; courts (private CPA actions)
A sweeping health-data privacy law covering 'consumer health data' far beyond HIPAA — including biometric data, health inferences drawn by algorithms, and reproductive health information. Companies need consent to collect or share such data, must honor deletion requests, and cannot geofence health facilities. Consumers can sue under Washington's Consumer Protection Act.
Who is protected: Washington consumers and individuals whose health data is collected in Washington
Legal detail
Chapter 19.373 RCW (HB 1155): consent requirements for collection/sharing, valid authorization for sale, deletion rights, geofencing ban around health services, and a private right of action via the WA CPA; effective Mar. 31, 2024 (small businesses June 30, 2024).
Key facts
| Jurisdiction | Washington |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | April 27, 2023 |
| Citation | RCW ch. 19.373 |
| Private right of action | Yes, individuals can sue |
| Penalties | CPA remedies: actual damages (trebled up to $25,000), injunctive relief, attorney's fees; AG civil penalties |
| Topics | consumer data privacy · healthcare AI · biometric data · consumer protection · data retention |
| Statute | Revised Code of Washington, Chapter 19.373 RCW: My Health My Data Act |
More AI rules in Washington
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
- Washington HB 1999 (criminalizes AI/fabricated CSAM and nonconsensual fake intimate images) · In effect
- Washington SB 5395 (limits AI in health-insurance prior-auth denials) · In effect
- SB 5152 (Election Synthetic Media) · In effect
- SSB 5886 (WA Digital Likeness Rights) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- NYDFS CL 7 (2024) — Insurance AI Anti-Discrimination · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.