Washington State has recently passed privacy legislation that is considered to be the most significant since the adoption of the California Consumer Privacy Act (CCPA) in 2018. This legislation will require businesses to take significant action to ensure compliance.
The My Health My Data Act was approved by the Washington Senate on April 5, following a similar approval by the House in March. Governor Inslee is expected to sign it into effect, which would increase privacy rights for medical information and employer obligations beyond the federal HIPAA law. The article provides answers to 10 common questions that Washington businesses may have regarding compliance.
Related: FTC Cracking Down On Telehealth Data Sharing
The Act will apply to any entity, including nonprofits, that conducts business in Washington, or that provides products and services to consumers in Washington, and alone or jointly with others determines the purpose and means of collecting, processing, sharing or selling consumer health data.