ComplyRoom US REGULATORY TRACKERGet deadline alerts
Dated research · 63 rules · 20 states · Data cutoff
AI & Privacy/Washington/RCW 19.373; HB 1155 (2023)

My Health My Data Act

Enacted in force

Jurisdiction
Washington [source]
Applies to
Regulated entities doing business in Washington or targeting Washington consumers and determining consumer-health-data processing; includes small businesses on their later date. Consumers include Washington residents and people whose health data is collected in Washington; employment context is excluded. [source]
Penalty
Consumer Protection Act public and private remedies under RCW 19.373.090; no single fixed cap is stated in the cited chapter. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026

Fields requiring verification

  • legal effective date: Unverified — No distinct legal-effective date was established; do not substitute the operative/compliance date. Primary source
  • enforcement date: Unverified — No distinct enforcement-start date was established. Primary source

In plain English

  • Regulated entities doing business in Washington or targeting Washington consumers and determining consumer-health-data processing; includes small businesses on their later date. Primary source
  • Consumers include Washington residents and people whose health data is collected in Washington; employment context is excluded. Primary source
  • Publish a consumer health data privacy policy with the required categories, purposes and sharing disclosures. Primary source
  • Obtain collection/sharing consent unless the processing is necessary to provide a consumer-requested product or service. Primary source
  • Obtain separate valid authorization before a health-data sale and honor the chapter’s access/deletion rights. Primary source

Dates and phased obligations

Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

· operative
Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

The principal privacy duties in §§.020–.070 apply 2024-03-31 generally and 2024-06-30 to small businesses. The geofence provision has a different earlier commencement; this row does not label the entire act as first effective in March 2024. Source and qualifications

Questions from this record

Who does RCW 19.373; HB 1155 (2023) cover?

Regulated entities doing business in Washington or targeting Washington consumers and determining consumer-health-data processing; includes small businesses on their later date. Consumers include Washington residents and people whose health data is collected in Washington; employment context is excluded. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Verification history

  • — Facts and dates reconciled from the accepted T1 report. Source
  • — Accepted T1 report content changed. Source

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix