Washington My Health My Data Act

Statute United States (Washington) · 2023

The My Health My Data Act regulates consumer health data held by anyone HIPAA does not cover, on an extremely broad definition that reaches inferences, biometrics, precise location near a health facility, and anything that identifies a past, present or future physical or mental health status. It requires separate consent for collection and for sharing, bans the sale of such data without a signed authorisation, and carries a private right of action.

Horizontal regime. It binds companies by what they do with data, software or customers, not by the sector they sit in. The industries below are where it creates specific, additional duties — not the limit of who has to comply.

Countries

Where this binds. Each links to the providers apis.io has catalogued there.

Regions

Industries

Each links to that industry as a scored cohort — so the question "how ready is this sector for the regime that governs it?" becomes one you can actually look at.