Lexology May 4, 2023
On April 27, 2023, the state of Washington enacted a landmark privacy law aimed at protecting the privacy of health data not covered by HIPAA. This law, named the “My Health My Data Act,” covers a very wide range of entities, consumers, and data. It also contains a private right of action. Companies should soon begin evaluating the scope of this law and its requirements before it comes into effect March 31, 2024 (for “small businesses,” June 30, 2024).
There are many nuances and complexities to this law that go beyond HIPAA or any other existing state “comprehensive” privacy law. We highlight some of the key elements below:
- Applicability. Unlike other state consumer privacy laws, this law contains no...