United States of America: Rejected People's Privacy Act (SB 5643) in Washington State Legislature

On 23 April 2023, the People's Privacy Act (SB 5643), was rejected after failing to pass before the Washington legislative session adjourned. The Act would have applied to business entities in the state of Washington which, annually, would have had a revenue of at least USD 10 million through at least 300 separate transactions or would have processed personal information of at least 1'000 unique individuals. If passed, it would have granted data subjects in Washington state the right to know, access, refuse consent, delete, and correct their personal information. Covered entities would have been subject to a number of data processing obligations, such as having a clear and easily understandable long-form and short-form privacy policy displayed prominently and readily accessible to data subjects. The Act would also have set out the conditions under which personal information could have been transferred to third parties. Further, covered entities would have needed to conduct and document a data protection assessment of certain processing activities, including capturing personal information for targeted advertising and the sale of personal information.