Digital Policy Alert logo

United States of America: Introduction of Washington People's Privacy Act (HB 1433)

Policy overview

Description

Introduction of Washington People's Privacy Act (HB 1433)

On 29 January 2021, the Washington People's Privacy Act (HB 1433) was introduced. The Bill contains measures aimed at protecting personal data of individuals both online and offline. In particular, it obliges businesses to offer explicit and accessible data privacy rules, as well as obtain affirmative, opt-in consent for the collection and use of personal data. Furthermore, businesses would be forbidden from refusing to service or charging higher costs to clients who refuse to allow their personal data to be used. Companies and government entities would also be prohibited from using people's personal information to discriminate against them. Finally, the Bill would give individuals rights such as access to information, correction, and withdrawal of consent.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-01-29
under deliberation

On 29 January 2021, the Washington People's Privacy Act (HB 1433) was introduced. The Bill contains…

2022-03-10
rejected

On 10 March 2022, the Washington People's Privacy Act (HB 1433) is rejected since it was not adopte…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data processing
Regulatory tool
User right to rectification of personal data
User consent: Permit user opt-out
User or public reporting requirement
Duty of care requirement
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): data collection
Regulatory tool
User right to rectification of personal data
User consent: Permit user opt-out
User or public reporting requirement
Duty of care requirement
Sanctions
Civil penalty
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
User right to rectification of personal data
User consent: Permit user opt-out
User or public reporting requirement
Duty of care requirement
Data storage/retention obligation
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: data processing
Regulatory tool
User or public reporting requirement
User consent: Opt-in requirement
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: monetisation (any form)
Regulatory tool
Sanctions
Civil penalty
Regulated subjects
1
algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: operate
Regulatory tool
Prohibition of targeted trading partner under-cutting or other discrimination
Sanctions
Civil penalty
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data processing

personal data (all forms): data collection

personal data (all forms): storage (any form)

personal data: biometric: data processing

personal data: biometric: monetisation (any form)

algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: operate