Chapter 7: State Data Breach Notification, Data Security, and Data Destruction Laws

CIPP/US Washington consumer health data law guide

Washington's My Health My Data Act regulates specified consumer health data activities. Its application depends on the statutory definitions and covered entity facts.

Practical example

For a wellness application, identify the consumer health data, regulated entity, collection purpose and any consent or disclosure issue before selecting a rule.

Common mistake

Assuming that a health-related data set is governed only by HIPAA without checking a state consumer health data statute.

Washington codifies the My Health My Data Act in chapter 19.373 RCW. The statute should be read for its definitions, consumer rights, consent and disclosure provisions.

For CIPP/US study, compare the state consumer health data analysis with HIPAA scope rather than treating the two regimes as interchangeable.

How this supports CIPP/US study

Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US practice exam.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.