California Governor Gavin Newsom recently signed Assembly Bill 352 and Assembly Bill 254 into law, effective January 1, 2024. Through these new laws, California seeks to mitigate the risk of out-of-state prosecution of individuals seeking abortions or gender-affirming care. These bills include significant changes to California privacy and health information interoperability laws that will impact healthcare providers, health plans, employers, electronic health record developers and certain digital health companies handling medical information related to gender-affirming care, abortion, and abortion-related services, sexual health, fertility or contraception.
The My Health My Data Act in Washington State (the Act) is expected to be signed into law by Governor Jay Inslee this year, after being passed by both the Washington Senate and House in different versions. Unlike recent state privacy laws, the Act specifically targets consumer health data that is not covered by the Health Insurance Portability and Accountability Act (HIPAA). It includes provisions that apply to processors and third parties who may handle a broadly defined set of consumer health data, beyond healthcare-adjacent businesses. The Act could have a significant impact on various entities, including advertisers, mobile app providers, wearable device manufacturers, healthcare companies and their data processors who handle non-HIPAA-regulated health information.