Lexology March 19, 2024
Almost one year ago, Washington State passed the “My Health, My Data” Act (the Act), which aims to protect Washington consumer health data, particularly data related to reproductive healthcare. The Act is the first law in the country aimed at protecting the vast amount of health data that falls outside the protection of the Health Insurance Portability and Accountability Act (HIPAA), encompassing data collected by wearables, certain retail purchases, and non-HIPAA telehealth services. The Act takes effect at the end of this month.
In preparation for the effective date of 31 March 2024, one of the most burdensome proactive compliance requirements is that a regulated entity1 must publish a link to its consumer health data privacy policy on its homepage,...