The Washington Privacy Act is back and now includes provisions for handling personal data during a public health emergency such as a pandemic.

Its provisions are closer to the European Union’s General Data Privacy Regulation (GDPR) than the California Consumer Privacy Act (CCPA) and include:

  • Controller and processor obligations
  • Right of correction
  • Provisions regarding profiling
  • Purpose specification
  • Data minimization
  • Mandatory Data Protection Impact Assessments, called Data Protection Assessments, in certain cases

Read the full text of the bill.