Washington My Health My Data Act
RCW 19.373 · Read 2026-08-15
Applicable from 31 March 2024 for regulated entities, and from 30 June 2024 for small business. The act carries a private right of action through the Consumer Protection Act.
Identifier
- Identifier
- RCW 19.373
- Level
- State WA
- Status
- In force
- Adopted
- 2023-04-27
- Applies from
- 2024-03-31
- Supervisory bodies
- Washington AG
Named requirements
Consumer health data privacy policy
RCW 19.373.020
A separate, linked policy naming the health data collected, the purposes and the recipients.
Consent to collect and share
RCW 19.373.030
Separate consent for collection and for sharing, outside what is necessary to provide the requested service.
Consumer rights
RCW 19.373.040
Access, a list of who received the data, withdrawal of consent and deletion, including from backups.
Authorisation to sell
RCW 19.373.060
A signed valid authorisation with prescribed content before consumer health data is sold.
Geofencing ban
RCW 19.373.100
A ban on geofences around facilities that provide health care services to identify or track consumers.
Official source
EU acts on the same ground
- gdpr
Health data is a special category under Article 9 GDPR. The Washington act reaches consumer health data outside the health care system.
Change monitoring
The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.
| Field | Value |
|---|---|
| Register | Washington AG, RCW 19.373 |
| Publisher | Washington State Office of the Attorney General |
| Last read | 2026-08-15 |
| Interval | Every 30 days |
| Next re-read | 2026-09-14 |
| Status | Re-read overdue |
Row history
Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.
| Date | Event | Source |
|---|---|---|
| 2026-08-15 | Row read against the official publication | Washington State Office of the Attorney General |
| 2024-03-31 | Date of application according to the publisher | Washington State Office of the Attorney General |
| 2023-04-27 | Adopted under RCW 19.373 | Washington State Office of the Attorney General |
Monitoring states when the row was checked, not how the legal position should be assessed.
Cite this row
The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.
RCW 19.373, Washington My Health My Data Act. NovaCopilot, https://legal.exploreworldai.com/us/regler/washington-my-health-my-data (hämtad 2026-10-25, bevis sha256:df8f5714d15a3bcb, bygge legal-2026-10-25).
- sha256:
- df8f5714d15a3bcbb8fe45141db863f36c5245294fef811085c53887abe0fb75
- hämtad:
- 2026-10-25
- source_confidence:
- derived
- bygge:
- legal-2026-10-25
- officiell källa:
- https://app.leg.wa.gov/rcw/default.aspx?cite=19.373
Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. app.leg.wa.gov.
The row is a source reference with an official identifier. No legal advice and no compliance decision.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit