Washington's Attorney General issued a short set of FAQs for the Washington My Health My Data Act. These FAQs may be updated periodically and may provide a useful resource for companies as they work through the law's requirements. 

A few highlights from this round:

• The FAQs confirm that while the geofencing restrictions will be effective on July 23, 2023, the other provisions will not be in effect until March 2024 (June 2024 for small businesses).
• The Act will apply to all businesses that conduct business in Washington (or provide services or products to Washington) and process the personal data covered by the Act. An entity that only stores data in Washington is not subject to the Act. Out-of-state entities that are processors for regulated entities or small businesses must comply with the Act.
• Businesses covered by the Act must place a separate link to their Consumer Health Data Privacy Policy on the company’s homepage.
• While information like the purchase of toiletries is not, on its own, consumer health data, if that information is used to make inferences about someone's physical or mental health status, those inferences will be considered consumer health data.