Washington's My Health My Data Act – A Roadmap For Compliance

What You Need To Know

• Introducing a new tool to check whether Washington's My Health My Data Act applies to you!
• The act creates a host of new requirements for companies that deal in consumer health data—particularly around disclosure, use, sale, and consumer access.
• It designates certain subject companies as "regulated entities" who must comply by March 31 and other companies as "small business" who must comply by June 30.
• Unlike most U.S. state privacy laws, violations can be enforced through a private right of action, but plaintiffs must prove damages. That can be tough, but plaintiffs' attorneys may nonetheless try and extract low-value settlements from companies that have obvious compliance issues.