Skip to main content
Find a Lawyer

Washington Revised Code Title 19. Business Regulations--Miscellaneous § 19.373.020. Consumer health data privacy policy

Current as of January 01, 2025 | Updated by Findlaw Staff

(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall maintain a consumer health data privacy policy that clearly and conspicuously discloses:

(i) The categories of consumer health data collected and the purpose for which the data is collected, including how the data will be used;

(ii) The categories of sources from which the consumer health data is collected;

(iii) The categories of consumer health data that is shared;

(iv) A list of the categories of third parties and specific affiliates with whom the regulated entity or the small business shares the consumer health data; and

(v) How a consumer can exercise the rights provided in RCW 19.373.040.

(b) A regulated entity and a small business shall prominently publish a link to its consumer health data privacy policy on its homepage.

(c) A regulated entity or a small business may not collect, use, or share additional categories of consumer health data not disclosed in the consumer health data privacy policy without first disclosing the additional categories and obtaining the consumer's affirmative consent prior to the collection, use, or sharing of such consumer health data.

(d) A regulated entity or a small business may not collect, use, or share consumer health data for additional purposes not disclosed in the consumer health data privacy policy without first disclosing the additional purposes and obtaining the consumer's affirmative consent prior to the collection, use, or sharing of such consumer health data.

(e) It is a violation of this chapter for a regulated entity or a small business to contract with a processor to process consumer health data in a manner that is inconsistent with the regulated entity's or the small business's consumer health data privacy policy.

(2) A small business must comply with this section beginning June 30, 2024.

Previous Part of Code Next Part of Code
Back to Chapter List

Cite this article: FindLaw.com - Washington Revised Code Title 19. Business Regulations--Miscellaneous § 19.373.020. Consumer health data privacy policy - last updated January 01, 2025 | https://codes.findlaw.com/wa/title-19-business-regulationsmiscellaneous/wa-rev-code-19-373-020/

FindLaw Codes may not reflect the most recent version of the law in your jurisdiction. Please verify the status of the code you are researching with the state legislature before relying on it for your legal needs.

Was this helpful?

Welcome to FindLaw's Cases & Codes

A free source of state and federal court opinions, state laws, and the United States Code. For more information about the legal concepts addressed by these cases and statutes, visit FindLaw’s Learn About the Law.

Go to Learn About the Law

Latest Blog Posts

For Legal Professionals

Learn About The Law

Get help with your legal needs

FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.

Go to Learn About the Law

Need to Find an Attorney?

Search our directory by legal issue

Enter information in one or both fields (Required)

Copied to clipboard