“The People’s Privacy Act is about reclaiming our digital autonomy, protecting our safety, and putting control back where it belongs: in the hands of the people.”
– Rep. Shelley Kloba
Exciting news! From the Washington State House Democrats press release:
“In an age where personal data has become the new gold rush, Rep. Shelley Kloba (D–Kenmore) has introduced the People’s Privacy Act to protect the autonomy, safety, and privacy of Washingtonians. This landmark legislation empowers individuals to take back control over their most valuable asset—their personal data—and ensures that companies can no longer profit at the expense of consumer rights.”
It really is landmark legislation, building on the strong protections for health data in the My Health My Data bill that Washington passed in 2023. Here’s how EPIC (a well-respected national privacy organization) summarizes it:
“The legislation is based on EPIC and Consumer Reports’ model state privacy bill. It includes data minimization provisions that meaningfully limit the collection and use of personal data. The legislation also bans the sale of sensitive data such as precise geolocation data, data about minors, and health data.
The legislation also includes strong enforcement provisions, stating that any violation is an unfair or deceptive act in trade or commerce and an unfair method of competition under the Washington Consumer Protection Act, which includes a private right of action.”
Key Provisions of the People’s Privacy Act include:
- Bans the sale of sensitive data (including without opt-in consent. This extends My Health My Data’s opt-in consent requirement for health data to also include racial or ethnic origin, religious beliefs, sex life, sexual orientation, status as transgender or nonbinary, union membership, income level or indebtedness, or citizenship or immigration status;
- Protecting Minors: Prohibits the sale of personal data and targeted advertising directed at children and teens, safeguarding their online privacy.
- Opt-Out of targeted advertising and decisions made solely by automated systems.
- Data Minimization: Requires companies to collect and process only the personal data necessary to provide their product or service.
- Preventing Discrimination: Protects individuals from unfair treatment based on their privacy choices.
The People’s Privacy Act is likely to be heard by the House Technology, Economic Development, & Veterans Committee, where Rep. Kloba is Vice-Chair and long-time privacy advocate Rep. Brandy Donaghy is a key member, so it’s a great opportunity to build on My Health My Data and get strong privacy protections for all our personal data!