Washington Lacked Comprehensive Consumer Privacy Law
Attorney General Nick Brown sees no immediate path for new statewide legislation despite existing health data rules.
Updated on Oct. 9, 2026 in Cybersecurity
Live Poll
Should your state prioritize passing comprehensive consumer data privacy legislation?
Washington Attorney General Nick Brown stated the state currently lacks comprehensive consumer privacy legislation. Speaking at a conference in Seattle, he noted that lawmakers are not expected to introduce such bills next year.
Why it matters
The absence of a broad framework leaves a regulatory gap in Washington, as the state currently relies on more narrow statutes rather than a general privacy mandate. This position clarifies the legislative outlook for the tech sector and data-handling practices statewide.
Washington operates under the My Health My Data Act, which was enacted nearly three years ago to regulate specific categories of health information. No broader privacy benchmark or comprehensive legislative expansion has been established to date.
The players
Nick Brown
The Attorney General of Washington who oversees state legal enforcement and has publicly commented on privacy legislative priorities.
The details
Attorney General Nick Brown defended the state's current enforcement strategy regarding the My Health My Data Act, a targeted statute designed to protect sensitive health information from unauthorized collection or sale. By focusing on this narrow domain, the state avoids the immediate adoption of a comprehensive privacy act that would cover all forms of consumer digital footprints. The current approach emphasizes oversight of specific health-related data rather than a universal data protection mandate.
Timeline
October 8, 2026: Attorney General Nick Brown spoke at a conference in Seattle.
The Tech Race
Washington maintains its specialized regulatory stance defined by the My Health My Data Act instead of adopting broader, multi-sector privacy frameworks. This approach keeps the state distinct from jurisdictions that have moved toward comprehensive, horizontal privacy legislation.
Residents will continue to see data privacy protections restricted primarily to health information as defined by existing state law. No change in the scope of digital consumer rights is expected in the upcoming legislative session.
The takeaway
The state has signaled a firm reliance on its existing targeted health data statute for the foreseeable future. Readers should watch for any shifts in the legislative agenda regarding general privacy laws in 2027 as a signal of a change in state strategy.
Further reading
For more updates on how local regulations affect data practices, follow the latest reporting in Cybersecurity.
Live Poll
Should your state prioritize passing comprehensive consumer data privacy legislation?
