New Washington consumer health privacy policy guidance may complicate broader compliance efforts
Lexology January 18, 2024
Adding to the growing list of heightened privacy and data protection requirements imposed on consumer health data and other categories of sensitive personal data, the Washington Attorney General recently updated its guidance on Washington’s My Health My Data Act’s notice requirements, explicitly requiring a standalone consumer health data privacy policy with its own link on websites and mobile apps.
Regulators and legislators are increasingly pursuing additional privacy and other protections for sensitive data, including consumer health data. Since Washington’s passage of its My Health My Data Act on April 27, 2023, Nevada also passed a consumer health data privacy law, and Connecticut amended its consumer data privacy act to impose similar transparency requirements and restrictions on the use and disclosure...