Lexology June 15, 2023
On April 27, 2023, Washington State Governor Jay Inslee signed the My Health My Data Act into law, making Washington the first state to establish a comprehensive health data privacy law in the United States.
Most of the law’s substantive provisions apply to “regulated entities” that (1) conduct business in Washington state or offer products or services targeted at consumers in the state, and (2) determine the purpose and means of collecting, processing, sharing, or selling of consumer health data. The term “consumer health data” is broadly defined as “personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status.” “Physical or mental health status” includes...