The Washington My Health My Data Act was passed in April 2023 to expand privacy protections for personal health data. On March 31, 2024, the Act’s remaining stringent requirements will come into full force for all organizations subject to the law, except for small businesses who have until June 30, 2024 to comply. The Act sets no minimum number of data subjects or revenue threshold. It was intended to cover consumer health data outside the scope of the Health Information Portability and Accountability Act.