Health data privacy in the United States works like a kaleidoscope does. The same piece of information (i.e., a person's heart rate) changes character depending on how you turn the lens. Collected by a hospital, and it’s protected health information under HIPAA. Entered into a fitness app, and it becomes consumer health data under Washington's My Health My Data Act. Processed by a company in California, it’s sensitive personal data under the CCPA. The data never changes, but the legal frame around it does.
In a recent Axiom CLE, privacy attorneys Ava Crayton and Nicole Martin walked through these overlapping frameworks, discussing where the Washington My Health My Data Act sits among them, and what legal teams should be doing about it.
