On January 22, the NY State legislature passed what is arguably the most onerous and restrictive U.S. state privacy law to date – the NY Health Information Privacy Act (“NYHIPA”).  If signed by the Governor in its current...

The Washington Attorney General (“WA AG”) recently updated its My Health, My Data Act (“MHMDA”) FAQs to clarify that consumer health data (“CHD”) does not include the purchase of non-prescription medication, but does include inferences about a consumer’s health based on that purchase....

On March 31, 2024, most of Washington’s My Health, My Data Act (“MHMDA”) will go into effect for all in-scope business other than small businesses. As we’ve previously blogged, the geofencing provision went into effect last July. Notably,...

The FTC finalized an order against 1Health.io (formerly Vitagene), alleging that the company misrepresented consumers’ rights regarding their genetic and health data, including the ability to have their data deleted; inadequately secured such data; and...

Enacted on April 27, 2023, Washington’s “My Health, My Data” Act (the “Act”) creates significant compliance obligations for companies processing data in its scope. The expansive reach of the Act, coupled with a private right of action...