Lexology April 18, 2023
Washington’s My Health, My Data Act is headed to Governor Jay Inslee’s desk. This is the first U.S. state law that will regulate the consumer health information landscape – uncharted territory – placing guardrails on virtually all companies that “collect”, i.e., “process, access, derive, infer, share, or sell” consumer health data.
The law would include all companies outside of those that strictly process patient-provider-protected health information (as defined under the federal Health Information Portability and Accountability Act (HIPAA)). The law takes effect in March 2024, with a delayed effective date of June 2024 for small businesses.
Time is of the essence in supporting companies with robust compliance to the new law. A host of copycat bills across the states have...