My Health My Data Act
Revised Code of Washington, Chapter 19.373 (in effect since 2024)
- Applies to
- Businesses of any size that collect consumer health data about Washington consumers, including fitness, wellness and app data that HIPAA does not cover. Information already covered by HIPAA is exempt.
- What it asks
- A published consumer health data privacy policy, consent before collecting and separate consent before sharing, a signed authorization before any sale, and the right to see and delete the data. Individuals can sue under the act.
- What the software does
- Signed consents and authorizations filed by person, permissions that limit who sees health documents, and deletion that is logged.