The Washington Privacy Act is back and now includes provisions for handling personal data during a public health emergency such as a pandemic.
Its provisions are closer to the European Union’s General Data Privacy Regulation (GDPR) than the California Consumer Privacy Act (CCPA) and include:
- Controller and processor obligations
- Right of correction
- Provisions regarding profiling
- Purpose specification
- Data minimization
- Mandatory Data Protection Impact Assessments, called Data Protection Assessments, in certain cases