Washington My Health My Data Act
In effect since March 31, 2024 (June 30, 2024, for small businesses), with no revenue threshold and a private right of action. Any business that collects consumer health data, including from wellness, fitness, med-spa or supplement customers, must publish a separate consumer health data privacy policy linked from its homepage and get consent before collecting or sharing that data. Your attorney confirms whether it applies to you.