Washington Data Privacy: A Plain-Language Overview
No comprehensive consumer privacy law (as of 2026)
Status: Washington has not passed a general privacy law (like the CCPA); it enforces sector-specific rules (like health data) instead.
Unlike other states, Washington does not have a single, comprehensive law regulating the sale or collection of all consumer data. Instead, the state focuses on specific high-risk areas, such as the 'My Health My Data' Act for health information and the 2019 Deepfake statute. Businesses must still adhere to general consumer protection standards regarding data security and deception.
Consumer rights
No comprehensive statutory consumer privacy rights specific to this state as of 2026; general consumer-protection rules may still apply.
Who it generally applies to
Specific regulations target varying entities; for example, the 'My Health My Data' Act applies broadly to entities collecting consumer health data, regardless of revenue thresholds.
What this means for B2B outreach
Sector-specific laws like the 'My Health My Data' Act generally cover personal data in a business context, but general privacy laws do not apply to B2B transactions.
Authoritative source: Washington State Office of the Attorney General. Always confirm current requirements there.
Marketing that respects privacy by design
We run permission-based, compliance-minded campaigns with real opt-out handling.
Talk to us