111 chapters · 1,481 sections in this title.
RCW 19.373.005 Finding—Intent—2023 c 191.
1.6K chars
(1) The legislature finds that the people of Washington regard their privacy as a fundamental right and an essential element of their individual freedom. Washington's Constitution explicitly provides the right to privacy. Fundamental privacy rights have long been and continue to …
RCW 19.373.010 Definitions.
15.5K chars
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.(1) "Abortion" means the termination of a pregnancy for purposes other than producing a live birth.(2) "Affiliate" means a legal entity that shares common branding with ano…
RCW 19.373.020 Consumer health data privacy policy.
1.9K chars
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall maintain a consumer health data privacy policy that clearly and conspicuously discloses:(i) The categories of consumer health data collected and th…
RCW 19.373.030 Collection or sharing of consumer health data.
1.7K chars
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity or a small business may not collect any consumer health data except:(i) With consent from the consumer for such collection for a specified purpose; or(ii) To the extent neces…
RCW 19.373.040 Consumer rights and requests—Refusal—Appeal.
5.8K chars
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a consumer has the right to confirm whether a regulated entity or a small business is collecting, sharing, or selling consumer health data concerning the consumer and to access such data, inclu…
RCW 19.373.050 Data security practices.
1.1K chars
(1) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall:(a) Restrict access to consumer health data by the employees, processors, and contractors of such regulated entity or small business to only those emp…
RCW 19.373.060 Processors.
1.4K chars
(1)(a)(i) Except as provided in subsection (2) of this section, beginning March 31, 2024, a processor may process consumer health data only pursuant to a binding contract between the processor and the regulated entity or the small business that sets forth the processing instructi…
RCW 19.373.070 Valid authorization to sell—Defects—Provision to consumer.
2.8K chars
(1) Except as provided in subsection (6) of this section, beginning March 31, 2024, it is unlawful for any person to sell or offer to sell consumer health data concerning a consumer without first obtaining valid authorization from the consumer. The sale of consumer health data mu…
RCW 19.373.080 Geofence restrictions.
0.4K chars
It is unlawful for any person to implement a geofence around an entity that provides in-person health care services where such geofence is used to: (1) Identify or track consumers seeking health care services; (2) collect consumer health data from consumers; or (3) send notificat…
RCW 19.373.090 Application of consumer protection act.
0.5K chars
The legislature finds that the practices covered by this chapter are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preserva…
RCW 19.373.100 Exemptions.
4.8K chars
(1) This chapter does not apply to:(a) Information that meets the definition of:(i) Protected health information for purposes of the federal health insurance portability and accountability act of 1996 and related regulations;(ii) Health care information collected, used, or disclo…
RCW 19.373.900 Short title.
0.1K chars
Chapter 191, Laws of 2023 may be known and cited as the Washington my health my data act.[ 2023 c 191 s 1.]