Healthcare
Doing Business in the United States? Steps to Comply with Washington's My Health My Data Act by March 31, 2024
Washington State's My Health My Data Act (MHMDA), passed in 2023, contains several mandates that will require many organizations doing business in the United States to update their operational and legal processes by March 31, 2024. MHMDA applies to any legal entity that operates in Washington, or provides products or services targeted to Washington consumers, and that acts as a data controller with respect to consumer health data (each such entity is defined in the MHMDA as a "regulated entity"). Unlike other states' privacy laws currently in place, there are no revenue or volume thresholds that would exempt entities from compliance with the regulation. Washington's unique approach may also set a precedent for laws in other states and is worth tracking for U.S. and global businesses that want to stay ahead of evolving health data privacy regimes.