ComplyRoom US REGULATORY TRACKERGet deadline alerts
AI & Privacy/Washington/RCW 19.373; HB 1155 (2023)

My Health My Data Act

Enacted in force

Jurisdiction
Washington [source]
Applies to
Regulated entities doing business in Washington or targeting Washington consumers and determining consumer-health-data processing; includes small businesses on their later date. Consumers include Washington residents and people whose health data is collected in Washington; employment context is excluded. [source]
Penalty
Consumer Protection Act public and private remedies under RCW 19.373.090; no single fixed cap is stated in the cited chapter. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026

Fields requiring verification

In plain English

Dates and phased obligations

Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

· operative
Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

The principal privacy duties in §§.020–.070 apply 2024-03-31 generally and 2024-06-30 to small businesses. The geofence provision has a different earlier commencement; this row does not label the entire act as first effective in March 2024. Source and qualifications

Questions from this record

Who does RCW 19.373; HB 1155 (2023) cover?

Regulated entities doing business in Washington or targeting Washington consumers and determining consumer-health-data processing; includes small businesses on their later date. Consumers include Washington residents and people whose health data is collected in Washington; employment context is excluded. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

Principal §§.020–.070 duties: 2024-03-31; small businesses: 2024-06-30 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Verification history

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix