Compare with different regulatory event:
On 23 July 2023, the My Health My Data Act (HB 1155) entered into force with grace periods in the US state of Washington. The Act will require entities collecting health data, including biometric, abortion, and mental data, to specify the purpose of collection and the sources from which the data is being collected. Additionally, regulated entities will have to provide a list of businesses with which they share the data, including a point of contact. Furthermore, the entities will have to obtain the individual’s consent for collecting, processing and selling data. Finally, the individuals will have the right to know what type of data has been collected and to opt-out, withdraw their consent and request the deletion of their data. The Act has grace periods of varying periods applying to different kinds of regulated entities. Specifically, the provisions of the Act will apply to standard regulated entities from 31 March 2024, while they will apply to small businesses, defined as regulated entities either processing or selling health data of fewer than 100'000 consumers annually or deriving less than 50% of revenue from processing or selling health data of fewer than 25'000 consumers, from 30 June 2024.
Original source