On April 27, 2023, Washington enacted the “My Health My Data Act” (WMHMDA or the Act). Unlike other modern state privacy laws that purport to regulate any collection of “personal data,” WMHMDA confers privacy protections only upon “Consumer Health Data.” While the Act was promoted as a measure to help protect reproductive and gender affirming care, its scope goes beyond those discreet issues.
One of the unique aspects of WMHMDA is that it confers upon individuals the ability to bring private suit against a company that is believed to have violated the Act. Specifically, the WMHMDA treats a violation of the Act as an “unfair or deceptive act in trade or commerce and an unfair method of competition” under the Washington Consumer Protection Act, which is enforceable by private litigants in a similar manner as other alleged violations of the Washington Consumer Protection Act.[1] The private right of action has led to confusion regarding the types of remedies that can be sought from consumers versus the types of remedies that can only be sought by the government. The following chart summarizes the remedies that may be pursued by each type of plaintiff.
CLICK CHART TO VIEW LARGER

[1] WMHMDA Section 11.
