Washington Consumer Health Data Privacy Notice
Last updated: June 18, 2025
This Consumer Health Data Privacy Notice describes how AuthenticID collects, uses and discloses your Consumer Health Data.
What is Consumer Health Data?
The Washington My Health My Data Act (“WMHMDA”) defines “Consumer Health Data” as any personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. This may include, but is not limited to:
(i) Individual health conditions, treatment, diseases, or diagnosis;
(ii) Social, psychological, behavioral, and medical interventions;
(iii) Health-related surgeries or procedures;
(iv) Use or purchase of prescribed medication;
(v) Bodily functions, vital signs, symptoms, or measurements of the information;
(vi) Diagnoses or diagnostic testing, treatment, or medication;
(vii) Gender-affirming care information;
(viii) Reproductive or sexual health information;
(ix) Biometric data;
(x) Genetic data;
(xi) Precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health services or supplies;
(xii) Data that identifies a consumer seeking health care services; or
(xiii) Any information that a regulated entity or a small business, or their respective processor, processes to associate or identify a consumer with the data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning).
What Consumer Health Data is collected?
As further described our Privacy Policy , the personal information we may collect and retain depends on the context of the applicable services provided and relevant interactions. Because consumer health data is defined very broadly, the Biometric Information we collect could also be considered Consumer Health Data. Please see our Biometric Information Notice and Consent for additional information on our handling of your Biometric Information.
How Do We Use Consumer Health Data?
For Consumer Health Data which we collect as a controller, we use Consumer Health Data for the purposes described under the “How We Use Information” section of our Privacy Policy . This may include, without limitation, providing and improving our Services, verifying your identity, meeting contractual obligations, to detect and prevent fraud, and other purposes for which you give your consent. See the “Your Choices and Rights” section of our Privacy Policy for more details regarding your privacy rights and choices.
For Consumer Health Data which we collect and/or process on behalf of our customer, please review the customer’s privacy policies regarding how such information may be used.
Sources of Consumer Health Data
As described further in the “Information We Collect” section of our Privacy Policy , we collect personal information (which may include Consumer Health Data) directly from you, from our customers, partners, and/or service providers, from third party or public sources, through automated or tracking technologies, or through derivation of additional information.
Who is your Consumer Health Data shared with?
For Consumer Health Data which we collect as a controller, we may share the Consumer Health Data described above for the purposes described in the “How We Disclose Information” section of our Privacy Policy. As further described in our Privacy Policy, we share consumer health data with the following categories of third parties:
- Corporate affiliates and subsidiaries. We may disclose Consumer Health Data to our affiliated companies and subsidiaries.
- Partners, service providers and vendors. We may disclose Consumer Health Data to our partner, service providers and/or vendors in order to facilitate the provision of our services.
- Parties to a corporate transaction. We may disclose Consumer Health Data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
- Government and law enforcement agencies. As described in our Privacy Policy, we may disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
- Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to exercise our rights, comply with the law or to protect our rights or those of our customers or partners.
- With your consent or upon your request.
For Consumer Health Data which we collect and/or process on behalf of our customer, your Consumer Health Data will be shared with the applicable customer. Please review the customer’s privacy policies regarding how such information may be shared.
How to exercise your rights?
You may exercise your rights by contacting us at [email protected]. Please see the “Your Choices and Rights” section of our Privacy Policy for more details. If your request to exercise a right under the WMHMDA is denied, you may appeal that decision by contacting us at [email protected]. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.