Washington Revised Code Title 19. Business Regulations--Miscellaneous § 19.373.030. Collection or sharing of consumer health data

(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity or a small business may not collect any consumer health data except:

(b) A regulated entity or a small business may not share any consumer health data except:

(c) Consent required under this section must be obtained prior to the collection or sharing, as applicable, of any consumer health data, and the request for consent must clearly and conspicuously disclose: (i) The categories of consumer health data collected or shared; (ii) the purpose of the collection or sharing of the consumer health data, including the specific ways in which it will be used; (iii) the categories of entities with whom the consumer health data is shared; and (iv) how the consumer can withdraw consent from future collection or sharing of the consumer's health data.

(d) A regulated entity or a small business may not unlawfully discriminate against a consumer for exercising any rights included in this chapter.