Landmark Washington Health Data Privacy Law Creates Suit Risks

Businesses dealing with health-related data in Washington state will be subject to new litigation and enforcement risks next week, as a far-reaching health privacy law takes effect.

The state’s My Health My Data Act—enacted in April 2023 in reaction to the US Supreme Court’s decision overturning a federal right to abortion—guarantees Washington residents some of the broadest health information privacy protections in the nation. It’s also generated cross-industry fears that companies, many of which may not have previously considered themselves as dealing in health data, will face a groundswell of costly legal action over alleged violations.

The law’s general ...