reglab/statecodes huggingface dataset:
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.335 - Veterans' Benefit-Related Services. › 19.335.010 - Definitions.

RCW 19.335.010
Definitions.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
(1) "Compensation" means money, property, or anything else of value, which includes, but is not limited to, exclusive arrangements or agreements for the provision of services or the purchase of products.
(2) "Person" includes, where applicable, natural persons, corporations, trusts, unincorporated associations, and partnerships.
(3) "Trade or commerce" includes the marketing or sale of assets, goods, or services, or any commerce directly or indirectly affecting the people of the state of Washington.
(4) "Veterans' benefit matter" means any preparation, presentation, or prosecution of a claim affecting a person who has filed or has expressed an intention to file an application for determination of payment, service, commodity, function, or status, entitlement to which is determined under laws administered by the United States department of veterans affairs or the Washington state department of veterans affairs pertaining to veterans, dependents, and survivors.
[ 2014 c 67 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.335 - Veterans' Benefit-Related Services. › 19.335.020 - Prohibited acts or practices.

RCW 19.335.020
Prohibited acts or practices.
A person may not engage in the following acts or practices:
(1) Receiving compensation for advising or assisting another person with a veterans' benefit matter, except as permitted under Title 38 of the United States Code;
(2) Using financial or other personal information gathered in order to prepare documents for, or otherwise represent the interests of, another in a veterans' benefit matter for purposes of trade or commerce;
(3) Receiving compensation for referring another person to a person accredited by the United States department of veterans affairs;
(4) Representing, either directly or by implication, either orally or in writing, that the receipt of a certain level of veterans' benefits is guaranteed.
[ 2014 c 67 § 3.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.335 - Veterans' Benefit-Related Services. › 19.335.030 - Advertising or promotion disclosures.

RCW 19.335.030
Advertising or promotion disclosures.
(1) It is unlawful for any person to advertise or promote any event, presentation, seminar, workshop, or other public gathering regarding veterans' benefits or entitlements that does not include the following disclosure: "This event is not sponsored by, or affiliated with, the United States Department of Veterans Affairs, the Washington State Department of Veterans Affairs, or any other congressionally chartered or recognized organization of honorably discharged members of the Armed Forces of the United States or any of their auxiliaries. Products or services that may be discussed at this event are not necessarily endorsed by those organizations. You may qualify for benefits other than or in addition to the benefits discussed at this event."
(2) The disclosure required by subsection (1) of this section must be in the same type size and font as the term "veteran" or any variation of that term as used in the event advertisement or promotional materials.
(3) The disclosure required by subsection (1) of this section must be disseminated, both orally and in writing, at the beginning of any event, presentation, seminar, workshop, or other public gathering regarding veterans' benefits or entitlements.
(4) The disclosure required by subsection (1) of this section does not apply where the United States department of veterans affairs, the Washington state department of veterans affairs, or any other congressionally chartered or recognized organization of honorably discharged members of the armed forces of the United States or any of their auxiliaries have granted written permission to the advertiser or promoter for the use of its name, symbol, or insignia to advertise or promote such events, presentations, seminars, workshops, or other public gatherings. The disclosure required by subsection (1) of this section also does not apply where the event, presentation, seminar, workshop, or gathering is part of an accredited continuing legal education course.
[ 2014 c 67 § 4.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.335 - Veterans' Benefit-Related Services. › 19.335.040 - Application of chapter.

RCW 19.335.040
Application of chapter.
Nothing in this chapter applies to officers, employees, or volunteers of the state, of any county, city, or other political subdivision, or of a federal agency of the United States, who are acting in their official capacity.
[ 2014 c 67 § 5.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.335 - Veterans' Benefit-Related Services. › 19.335.050 - Application of consumer protection act.

RCW 19.335.050
Application of consumer protection act.
The legislature finds that the practices covered by this chapter are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preservation of business and is an unfair or deceptive act in trade or commerce and an unfair method of competition for purposes of applying the consumer protection act, chapter 19.86 RCW.
[ 2014 c 67 § 6.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.345 - Ticket Sellers. › 19.345.005 - Intent.

RCW 19.345.005
Intent.
It is the intent of the legislature to protect consumers and ticket sellers from software that simulates the action of a human being purchasing tickets from a ticket seller in order to evade controls and measures on a ticket seller's website. The legislature is concerned by the use of software, commonly referred to as BOTs (web robots), to interfere with the operation of ticket sales over the internet, gaining unauthorized priority access to purchasing tickets, and thereby reducing access to the general public of online ticket sales at the intended original price. In order to protect consumers and ticket sellers, the legislature intends to prohibit acts and practices of persons that use or sell software to circumvent, thwart, interfere with, or evade a security measure, access control system, or other control or measure on a ticket seller's internet website. It is not the intent of the legislature to interrupt the online ticket buying process established by the authorized ticket seller, including the distribution of tickets to season ticket holders.
[ 2015 c 129 § 1.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.345 - Ticket Sellers. › 19.345.010 - Definitions.

RCW 19.345.010
Definitions.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
(1) "Admission ticket" means evidence of a right of entry to a venue or an entertainment event.
(2) "Affinity group" means an identifiable group of people who are members of the same organization, or who are customers of the same person, and who enjoy special privileges.
(3) "Event" means a concert, theatrical performance, sporting event, exhibition, show, or other similar activity held in this state.
(4) "Initial sale" means the first sale of an admission ticket by the ticket seller. "Initial sale" also includes the distribution of admission tickets under an agreement between the ticket seller and the recipient.
(5) "Person" means any individual, partnership, corporation, limited liability company, other organization, or any combination thereof.
(6) "Place of entertainment" means any privately or publicly owned or operated entertainment facility within this state, such as a theater, stadium, museum, arena, park, racetrack, or other place where concerts, theatrical performances, sporting events, exhibitions, shows, or other similar activities are held and for which an entry fee is charged.
(7) "Presale" means a sale of admission tickets at or below the price printed on the ticket by, or with the permission of, a ticket seller, prior to their release to the general public.
(8) "Promoter" means a person who organizes financing and publicity for an entertainment event.
(9) "Ticket seller" means a person that makes admission tickets available, directly or indirectly, at an initial presale or sale to the general public, and may include an owner or operator of a place of entertainment, a sponsor or promoter of an event, a sports team participating in an event, a fan club or affinity group, a theater company, a musical group, or similar participant in an event, or an employee or agent of any such person.
[ 2015 c 129 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.345 - Ticket Sellers. › 19.345.020 - Prohibited acts—Application of consumer protection act.

RCW 19.345.020
Prohibited acts—Application of consumer protection act.
(1) A person may not:
(a) Use software to circumvent, thwart, interfere with, or evade a security measure, access control system, or other control or measure on a ticket seller's internet website; or
(b) Sell software that is advertised for profit with the express purpose to circumvent, thwart, interfere with, or evade a security measure, access control system, or other control or measure on a ticket seller's internet website.
(2) The use or sale of software as described in subsection (1) of this section only violates this section if the user or seller knows or should know that the purpose of the software is to circumvent, thwart, interfere with, or evade a security measure, access control system, or other control or measure on a ticket seller's internet website.
(3) The legislature finds that the conduct described in subsection (1) of this section vitally affects the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. Using or selling software to circumvent, thwart, or evade a control or measure, which is used on a ticket seller's internet website to ensure an equitable distribution of tickets, is not reasonable in relation to the development and preservation of business and is an unfair or deceptive act in trade or commerce and an unfair method of competition for the purposes of applying the consumer protection act, chapter 19.86 RCW.
[ 2015 c 129 § 3.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.350 - Patent Infringement—Bad Faith Assertions. › 19.350.005 - Finding.

RCW 19.350.005
Finding.
The legislature finds that abusive patent litigation, and especially the assertion of bad faith infringement claims, can harm Washington's economy. A person or business that receives a demand asserting such claims faces the threat of expensive and protracted litigation and may determine that it has no choice but to settle and to pay a licensing fee, even if the claim is meritless. This is especially so for small and medium-sized entities and nonprofits lacking adequate resources to investigate and defend themselves against the infringement claims. Not only do bad faith patent infringement claims impose a significant burden on individual Washington businesses and other entities, they also undermine Washington's efforts to attract and nurture information technology and knowledge-based businesses. Resources expended to avoid the threat of bad faith litigation are no longer available to invest, develop and produce new products, expand, or hire new workers, thereby harming Washington's economy. Through this legislation, the legislature seeks to protect Washington's economy from abusive and bad faith assertions of patent infringement, while not interfering with federal law or legitimate patent enforcement actions.
[ 2015 c 108 § 1.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.350 - Patent Infringement—Bad Faith Assertions. › 19.350.010 - Definitions.

RCW 19.350.010
Definitions.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
(1) "Assertion of patent infringement" means:
(a) Sending or delivering a demand to a target;
(b) Threatening a target with litigation asserting, alleging, or claiming that the target has engaged in patent infringement;
(c) Sending or delivering a demand to the customers of a target; or
(d) Otherwise making claims or allegations, other than those made in litigation against a target, that a target has engaged in patent infringement or that a target should obtain a license to a patent in order to avoid litigation.
(2) "Claim" means the scope of the patent owner's exclusive rights to the use and control of the patent owner's invention.
(3) "Demand" means a letter, an email, or any other communication asserting that a person has engaged in patent infringement.
(4) "Person" means any individual, corporation, partnership, limited liability company, government, governmental subdivision, institution of higher education, or any other legal or commercial entity.
(5) "Target" means a person:
(a) Who has received a demand or against whom an assertion of patent infringement has been made;
(b) Who has been threatened with litigation or against whom a lawsuit has been filed alleging patent infringement; or
(c) Who has at least one customer who has received a demand letter asserting that the person's product, service, or technology has infringed a patent.
[ 2015 c 108 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.350 - Patent Infringement—Bad Faith Assertions. › 19.350.030 - Enforcement of chapter—Application of consumer protection act.

RCW 19.350.030
Enforcement of chapter—Application of consumer protection act.
The attorney general may bring an action in the name of the state, or as parens patriae on behalf of persons residing in the state, to enforce this chapter. For actions brought by the attorney general to enforce the provisions of this section, the legislature finds that the practices covered by this section are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. For actions brought by the attorney general to enforce this chapter, a violation of this chapter is not reasonable in relation to the development and preservation of business and is an unfair or deceptive act in trade or commerce and an unfair method of competition for purposes of applying the consumer protection act, chapter 19.86 RCW.
[ 2015 c 108 § 4.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.355 - Locksmith Services. › 19.355.010 - Definitions.

RCW 19.355.010
Definitions.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
(1) "Local telephone directory" means a publication listing telephone numbers for various businesses in a certain geographic area and distributed free of charge to some or all telephone subscribers in that area.
(2) "Local telephone number" means a telephone number that can be dialed without incurring long distance charges from telephones located within the area covered by the local telephone directory in which the number is listed. The term does not include long distance numbers, toll-free numbers, or nine hundred exchange numbers listed in a local telephone directory.
(3) "Locksmith services" means:
(a) Selling, installing, servicing, repairing, repinning, recombinating, and adjusting locks, safes, vaults, or safe deposit boxes;
(b) Originating keys;
(c) Operating, bypassing, or neutralizing locks, safes, vaults, or safe deposit boxes;
(d) Creating, documenting, selling, installing, managing, and servicing master-key systems;
(e) Unlocking, bypassing, or neutralizing locks for motor vehicles;
(f) Originating keys for motor vehicles, which can include the programming, reprogramming, or bypassing of any security transponder, immobilizer system, or subsequent technology built by the manufacturer; and
(g) Keying or recombinating motor vehicle locks.
(4) "Person" means an individual, partnership, limited liability partnership, corporation, or limited liability corporation.
[ 2015 c 28 § 1.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.355 - Locksmith Services. › 19.355.020 - Prohibited practices—Requirements.

RCW 19.355.020
Prohibited practices—Requirements.
(1) No person whose primary business is to provide locksmith services and who represents himself or herself to the public as a locksmith may misrepresent his, her, or its geographic location by:
(a) Listing a local telephone number in a local telephone directory or on an internet website if:
(i) Calls to the telephone number are routinely forwarded or otherwise transferred to a business location that is outside the calling area covered by the local telephone directory or outside the local calling area for the local telephone number listed on an internet website; and
(ii) The listing fails to conspicuously disclose the locality and state in which the business is located; or
(b) Listing a business name in a local telephone directory or on an internet website if:
(i) The name misrepresents the business's geographic location; and
(ii) The listing fails to disclose the locality and state in which the business is located.
(2) A person whose primary business is to provide locksmith services and who represents himself or herself to the public as a locksmith must conspicuously display on the business website and all advertising:
(a) The number of the business license issued to it by the state or a local government; or
(b) The state unified business identifier account number.
(3) The requirements of subsections (1) and (2) of this section do not apply to businesses that provide locksmith services that are ancillary to their primary business, such as businesses that provide roadside or towing services.
[ 2015 c 28 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.355 - Locksmith Services. › 19.355.030 - Application of consumer protection act.

RCW 19.355.030
Application of consumer protection act.
The legislature finds that the practices covered by RCW 19.355.020(1) are matters vitally affecting the public interest for the purpose of applying chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preservation of business and is an unfair or deceptive act in trade or commerce and an unfair method of competition for the purpose of applying chapter 19.86 RCW.
[ 2015 c 28 § 3.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.010 - Definitions.

RCW 19.370.010
Definitions.
The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.
(1) "Copyright owner" means the owner of a copyright of a nondramatic musical work recognized and enforceable under the copyright laws of the United States pursuant to Title 17 of the United States Code (17 U.S.C. Sec. 101 et seq.). "Copyright owner" does not include the owner of a copyright in a motion picture or audiovisual work, or in part of a motion picture or audiovisual work.
(2) "Music licensing agency" means a performing rights society.
(3) "Performing rights society" means an association or corporation that licenses the public performance of nondramatic musical works on behalf of copyright owners, such as the American Society of Composers, Authors and Publishers (ASCAP), Broadcast Music, Inc. (BMI), and SESAC, Inc.
(4) "Proprietor" means the owner of a retail establishment, restaurant, inn, bar, tavern, sports or entertainment facility, or any other similar place of business or professional office located in this state in which the public may assemble and in which nondramatic musical works or similar copyrighted works may be performed, broadcast, or otherwise transmitted for the enjoyment of members of the public there assembled.
(5) "Royalty" or "royalties" means the fees payable to a copyright owner or performing rights society for the public performance of nondramatic musical works or other similar works.
[ 2016 c 38 § 1.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.020 - Requirement to register.

RCW 19.370.020
Requirement to register.
A performing rights society that licenses the performing rights to music may not license or attempt to license the use of or collect or attempt to collect any compensation on account of any sale, license, or other disposition regarding the performance rights of music unless the performing rights society:
(1) Registers and files annually with the department of licensing an electronic copy of each performing rights form agreement providing for the payment of royalties made available from the performing rights society to any proprietor within the state; and
(2) Has a valid Washington unified business identifier number.
[ 2016 c 38 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.030 - List of members and affiliates—List of works licensed—Availability.

RCW 19.370.030
List of members and affiliates—List of works licensed—Availability.
A performing rights society must make available electronically to business proprietors the most current available list of members and affiliates represented by the performing rights society and the most current available list of the performed works that the performing rights society licenses.
[ 2016 c 38 § 3.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.040 - Violations—Penalties—Attorney general enforcement.

RCW 19.370.040
Violations—Penalties—Attorney general enforcement.
A person who willfully violates any of the provisions of this chapter may be liable for a civil penalty of not more than one thousand dollars per violation. Multiple violations on a single day may be considered separate violations. The attorney general, acting in the name of the state, may seek recovery of all such penalties in a civil action. The attorney general may issue civil investigative demands for the inspection of documents, interrogatory responses, and oral testimony in the enforcement of this section.
[ 2016 c 38 § 4.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.050 - Contact with proprietors—Requirements—Prohibited acts.

RCW 19.370.050
Contact with proprietors—Requirements—Prohibited acts.
(1) Before seeking payment or a contract for payment of royalties for the use of copyrighted works by that proprietor, a representative or agent for a performing rights society must: Identify himself or herself to the proprietor or the proprietor's employees, disclose that he or she is acting on behalf of a performing rights society, and disclose the purpose for being on the premises.
(2) A representative or agent of a performing rights society must not:
(a) Use obscene, abusive, or profane language when communicating with the proprietor or his or her employees;
(b) Communicate by telephone or in-person with a proprietor other than at the proprietor's place of business during the hours when the proprietor's business is open to the public. However, such communications may occur at a location other than the proprietor's place of business or during hours when the proprietor's business is not open to the public if the proprietor or the proprietor's agents, employees, or representatives so authorizes;
(c) Engage in any coercive conduct, act, or practice that is substantially disruptive to a proprietor's business;
(d) Use or attempt to use any unfair or deceptive act or practice in negotiating with a proprietor; or
(e) Communicate with an unlicensed proprietor about licensing performances of musical works at the proprietor's establishment after receiving notification in writing from an attorney representing the proprietor that all further communications related to the licensing of the proprietor's establishment by the performing rights society should be addressed to the attorney. However, the performing rights society may resume communicating directly with the proprietor if the attorney fails to respond to communications from the performing rights society within sixty days, or the attorney becomes nonresponsive for a period of sixty days or more.
[ 2016 c 38 § 5.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.060 - Information on proprietors' rights and responsibilities.

RCW 19.370.060
Information on proprietors' rights and responsibilities.
(1) The department of revenue shall inform proprietors of their rights and responsibilities regarding the public performance of copyrighted music as part of the business licensing service.
(2) Performing rights societies are encouraged to conduct outreach campaigns to educate existing proprietors on their rights and responsibilities regarding the public performance of copyrighted music.
[ 2016 c 38 § 6.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.070 - Contracts for the payment of royalties—Requirements.

RCW 19.370.070
Contracts for the payment of royalties—Requirements.
(1) No performing rights society may enter into, or offer to enter into, a contract for the payment of royalties by a proprietor unless at least seventy-two hours prior to the execution of that contract it provides to the proprietor or the proprietor's employees, in writing, the following:
(a) A schedule of the rates and terms of royalties under the contract; and
(b) Notice that the proprietor is entitled to the information contained in RCW 19.370.030.
(2) A contract for the payment of royalties executed in this state must:
(a) Be in writing;
(b) Be signed by the parties; and
(c) Include, at least, the following information:
(i) The proprietor's name and business address;
(ii) The name and location of each place of business to which the contract applies;
(iii) The duration of the contract; and
(iv) The schedule of rates and terms of the royalties to be collected under the contract, including any sliding scale or schedule for any increase or decrease of those rates for the duration of that contract.
[ 2016 c 38 § 7.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.080 - Applicability to investigations and notices.

RCW 19.370.080
Applicability to investigations and notices.
Nothing in chapter 38, Laws of 2016 may be construed to prohibit a performing rights society from conducting investigations to determine the existence of music use by a proprietor's business or informing a proprietor of the proprietor's obligations under the copyright laws of the United States pursuant to Title 17 of the United States Code (17 U.S.C. Sec. 101 et seq.).
[ 2016 c 38 § 8.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.370 - Performing Rights Societies. › 19.370.900 - Effective date—2016 c 38.

RCW 19.370.900
Effective date—2016 c 38.
This act takes effect January 1, 2017.
[ 2016 c 38 § 10.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.005 - Finding—Intent—2023 c 191.

RCW 19.373.005
Finding—Intent—2023 c 191.
(1) The legislature finds that the people of Washington regard their privacy as a fundamental right and an essential element of their individual freedom. Washington's Constitution explicitly provides the right to privacy. Fundamental privacy rights have long been and continue to be integral to protecting Washingtonians and to safeguarding our democratic republic.
(2) Information related to an individual's health conditions or attempts to obtain health care services is among the most personal and sensitive categories of data collected. Washingtonians expect that their health data is protected under laws like the health information portability and accountability act (HIPAA). However, HIPAA only covers health data collected by specific health care entities, including most health care providers. Health data collected by noncovered entities, including certain apps and websites, are not afforded the same protections. Chapter 191, Laws of 2023 works to close the gap between consumer knowledge and industry practice by providing stronger privacy protections for all Washington consumers' health data.
(3) With chapter 191, Laws of 2023, the legislature intends to provide heightened protections for Washingtonian's health data by: Requiring additional disclosures and consumer consent regarding the collection, sharing, and use of such information; empowering consumers with the right to have their health data deleted; prohibiting the selling of consumer health data without valid authorization signed by the consumer; and making it unlawful to utilize a geofence around a facility that provides health care services.
[ 2023 c 191 § 2.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.020 - Consumer health data privacy policy.

RCW 19.373.020
Consumer health data privacy policy.
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall maintain a consumer health data privacy policy that clearly and conspicuously discloses:
(i) The categories of consumer health data collected and the purpose for which the data is collected, including how the data will be used;
(ii) The categories of sources from which the consumer health data is collected;
(iii) The categories of consumer health data that is shared;
(iv) A list of the categories of third parties and specific affiliates with whom the regulated entity or the small business shares the consumer health data; and
(v) How a consumer can exercise the rights provided in RCW 19.373.040.
(b) A regulated entity and a small business shall prominently publish a link to its consumer health data privacy policy on its homepage.
(c) A regulated entity or a small business may not collect, use, or share additional categories of consumer health data not disclosed in the consumer health data privacy policy without first disclosing the additional categories and obtaining the consumer's affirmative consent prior to the collection, use, or sharing of such consumer health data.
(d) A regulated entity or a small business may not collect, use, or share consumer health data for additional purposes not disclosed in the consumer health data privacy policy without first disclosing the additional purposes and obtaining the consumer's affirmative consent prior to the collection, use, or sharing of such consumer health data.
(e) It is a violation of this chapter for a regulated entity or a small business to contract with a processor to process consumer health data in a manner that is inconsistent with the regulated entity's or the small business's consumer health data privacy policy.
(2) A small business must comply with this section beginning June 30, 2024.
[ 2023 c 191 § 4.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.030 - Collection or sharing of consumer health data.

RCW 19.373.030
Collection or sharing of consumer health data.
(1)(a) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity or a small business may not collect any consumer health data except:
(i) With consent from the consumer for such collection for a specified purpose; or
(ii) To the extent necessary to provide a product or service that the consumer to whom such consumer health data relates has requested from such regulated entity or small business.
(b) A regulated entity or a small business may not share any consumer health data except:
(i) With consent from the consumer for such sharing that is separate and distinct from the consent obtained to collect consumer health data; or
(ii) To the extent necessary to provide a product or service that the consumer to whom such consumer health data relates has requested from such regulated entity or small business.
(c) Consent required under this section must be obtained prior to the collection or sharing, as applicable, of any consumer health data, and the request for consent must clearly and conspicuously disclose: (i) The categories of consumer health data collected or shared; (ii) the purpose of the collection or sharing of the consumer health data, including the specific ways in which it will be used; (iii) the categories of entities with whom the consumer health data is shared; and (iv) how the consumer can withdraw consent from future collection or sharing of the consumer's health data.
(d) A regulated entity or a small business may not unlawfully discriminate against a consumer for exercising any rights included in this chapter.
(2) A small business must comply with this section beginning June 30, 2024.
[ 2023 c 191 § 5.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.050 - Data security practices.

RCW 19.373.050
Data security practices.
(1) Except as provided in subsection (2) of this section, beginning March 31, 2024, a regulated entity and a small business shall:
(a) Restrict access to consumer health data by the employees, processors, and contractors of such regulated entity or small business to only those employees, processors, and contractors for which access is necessary to further the purposes for which the consumer provided consent or where necessary to provide a product or service that the consumer to whom such consumer health data relates has requested from such regulated entity or small business; and
(b) Establish, implement, and maintain administrative, technical, and physical data security practices that, at a minimum, satisfy reasonable standard of care within the regulated entity's or the small business's industry to protect the confidentiality, integrity, and accessibility of consumer health data appropriate to the volume and nature of the consumer health data at issue.
(2) A small business must comply with this section beginning June 30, 2024.
[ 2023 c 191 § 7.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.060 - Processors.

RCW 19.373.060
Processors.
(1)(a)(i) Except as provided in subsection (2) of this section, beginning March 31, 2024, a processor may process consumer health data only pursuant to a binding contract between the processor and the regulated entity or the small business that sets forth the processing instructions and limit the actions the processor may take with respect to the consumer health data it processes on behalf of the regulated entity or the small business.
(ii) A processor may process consumer health data only in a manner that is consistent with the binding instructions set forth in the contract with the regulated entity or the small business.
(b) A processor shall assist the regulated entity or the small business by appropriate technical and organizational measures, insofar as this is possible, in fulfilling the regulated entity's and the small business's obligations under this chapter.
(c) If a processor fails to adhere to the regulated entity's or the small business's instructions or processes consumer health data in a manner that is outside the scope of the processor's contract with the regulated entity or the small business, the processor is considered a regulated entity or a small business with regard to such data and is subject to all the requirements of this chapter with regard to such data.
(2) A small business must comply with this section beginning June 30, 2024.
[ 2023 c 191 § 8.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.070 - Valid authorization to sell—Defects—Provision to consumer.

RCW 19.373.070
Valid authorization to sell—Defects—Provision to consumer.
(1) Except as provided in subsection (6) of this section, beginning March 31, 2024, it is unlawful for any person to sell or offer to sell consumer health data concerning a consumer without first obtaining valid authorization from the consumer. The sale of consumer health data must be consistent with the valid authorization signed by the consumer. This authorization must be separate and distinct from the consent obtained to collect or share consumer health data, as required under RCW 19.373.030.
(2) A valid authorization to sell consumer health data is a document consistent with this section and must be written in plain language. The valid authorization to sell consumer health data must contain the following:
(a) The specific consumer health data concerning the consumer that the person intends to sell;
(b) The name and contact information of the person collecting and selling the consumer health data;
(c) The name and contact information of the person purchasing the consumer health data from the seller identified in (b) of this subsection;
(d) A description of the purpose for the sale, including how the consumer health data will be gathered and how it will be used by the purchaser identified in (c) of this subsection when sold;
(e) A statement that the provision of goods or services may not be conditioned on the consumer signing the valid authorization;
(f) A statement that the consumer has a right to revoke the valid authorization at any time and a description on how to submit a revocation of the valid authorization;
(g) A statement that the consumer health data sold pursuant to the valid authorization may be subject to redisclosure by the purchaser and may no longer be protected by this section;
(h) An expiration date for the valid authorization that expires one year from when the consumer signs the valid authorization; and
(i) The signature of the consumer and date.
(3) An authorization is not valid if the document has any of the following defects:
(a) The expiration date has passed;
(b) The authorization does not contain all the information required under this section;
(c) The authorization has been revoked by the consumer;
(d) The authorization has been combined with other documents to create a compound authorization; or
(e) The provision of goods or services is conditioned on the consumer signing the authorization.
(4) A copy of the signed valid authorization must be provided to the consumer.
(5) The seller and purchaser of consumer health data must retain a copy of all valid authorizations for sale of consumer health data for six years from the date of its signature or the date when it was last in effect, whichever is later.
(6) A small business must comply with this section beginning June 30, 2024.
[ 2023 c 191 § 9.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.080 - Geofence restrictions.

RCW 19.373.080
Geofence restrictions.
It is unlawful for any person to implement a geofence around an entity that provides in-person health care services where such geofence is used to: (1) Identify or track consumers seeking health care services; (2) collect consumer health data from consumers; or (3) send notifications, messages, or advertisements to consumers related to their consumer health data or health care services.
[ 2023 c 191 § 10.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.090 - Application of consumer protection act.

RCW 19.373.090
Application of consumer protection act.
The legislature finds that the practices covered by this chapter are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preservation of business, and is an unfair or deceptive act in trade or commerce and an unfair method of competition for the purpose of applying the consumer protection act, chapter 19.86 RCW.
[ 2023 c 191 § 11.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.373 - Washington My Health My Data Act. › 19.373.900 - Short title.

RCW 19.373.900
Short title.
Chapter 191, Laws of 2023 may be known and cited as the Washington my health my data act.
[ 2023 c 191 § 1.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.375 - Biometric Identifiers. › 19.375.010 - Definitions.

RCW 19.375.010
Definitions.
The definitions in this section apply throughout this chapter , unless the context clearly requires otherwise.
(1) "Biometric identifier" means data generated by automatic measurements of an individual's biological characteristics, such as a fingerprint, voiceprint, eye retinas, irises, or other unique biological patterns or characteristics that is used to identify a specific individual. "Biometric identifier" does not include a physical or digital photograph, video or audio recording or data generated therefrom, or information collected, used, or stored for health care treatment, payment, or operations under the federal health insurance portability and accountability act of 1996.
(2) "Biometric system" means an automated identification system capable of capturing, processing, and storing a biometric identifier, comparing the biometric identifier to one or more references, and matching the biometric identifier to a specific individual.
(3) "Capture" means the process of collecting a biometric identifier from an individual.
(4) "Commercial purpose" means a purpose in furtherance of the sale or disclosure to a third party of a biometric identifier for the purpose of marketing of goods or services when such goods or services are unrelated to the initial transaction in which a person first gains possession of an individual's biometric identifier. "Commercial purpose" does not include a security or law enforcement purpose.
(5) "Enroll" means to capture a biometric identifier of an individual, convert it into a reference template that cannot be reconstructed into the original output image, and store it in a database that matches the biometric identifier to a specific individual.
(6) "Law enforcement officer" means a law enforcement officer as defined in RCW 9.41.010 or a federal peace officer as defined in RCW 10.93.020.
(7) "Person" means an individual, partnership, corporation, limited liability company, organization, association, or any other legal or commercial entity, but does not include a government agency.
(8) "Security purpose" means the purpose of preventing shoplifting, fraud, or any other misappropriation or theft of a thing of value, including tangible and intangible goods, services, and other purposes in furtherance of protecting the security or integrity of software, accounts, applications, online services, or any person.
[ 2017 c 299 § 3.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.375 - Biometric Identifiers. › 19.375.030 - Application of consumer protection act.

RCW 19.375.030
Application of consumer protection act.
(1) The legislature finds that the practices covered by this chapter are matters vitally affecting the public interest for the purpose of applying the consumer protection act, chapter 19.86 RCW. A violation of this chapter is not reasonable in relation to the development and preservation of business and is an unfair or deceptive act in trade or commerce and an unfair method of competition for the purpose of applying the consumer protection act, chapter 19.86 RCW.
(2) This chapter may be enforced solely by the attorney general under the consumer protection act, chapter 19.86 RCW.
[ 2017 c 299 § 4.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.375 - Biometric Identifiers. › 19.375.040 - Exclusions.

RCW 19.375.040
Exclusions.
(1) Nothing in this chapter applies in any manner to a financial institution or an affiliate of a financial institution that is subject to Title V of the federal Gramm-Leach-Bliley act of 1999 and the rules promulgated thereunder.
(2) Nothing in this chapter applies to activities subject to Title V of the federal health insurance privacy and portability act of 1996 and the rules promulgated thereunder.
(3) Nothing in this chapter expands or limits the authority of a law enforcement officer acting within the scope of his or her authority including, but not limited to, the authority of a state law enforcement officer in executing lawful searches and seizures.
[ 2017 c 299 § 5.]
2023 Revised Code of Washington › Title 19 - Business Regulations—Miscellaneous › Chapter 19.375 - Biometric Identifiers. › 19.375.900 - Finding—Intent—2017 c 299.

RCW 19.375.900
Finding—Intent—2017 c 299.
The legislature finds that citizens of Washington are increasingly asked to disclose sensitive biological information that uniquely identifies them for commerce, security, and convenience. The collection and marketing of biometric information about individuals, without consent or knowledge of the individual whose data is collected, is of increasing concern. The legislature intends to require a business that collects and can attribute biometric data to a specific uniquely identified individual to disclose how it uses that biometric data, and provide notice to and obtain consent from an individual before enrolling or changing the use of that individual's biometric identifiers in a database.
[ 2017 c 299 § 1.]