On April 27, Washington Gov. Jay Inslee signed into law the state's sweeping health privacy bill — the My Health My Data Act. The act, which establishes a comprehensive privacy framework for entities that do business in the state and that handle consumer health data, will take effect less than a year from now on March 31, 2024. The act presents a daunting challenge for covered businesses that must comply with its requirements, given its broad reach, substantial obligations and ambiguous language. Furthermore, its strict biometric privacy rules as well as the fact that it conveys a private right of action for consumers to sue companies for violating the act all but guarantee that the new act will be a very significant development in the consumer health space. Data, Privacy & Cybersecurity partner Jacqueline Klosek, and associates Federica De Santis and Jonathan Newmark, and law clerk Isabelle Staff explain more in Law360.