Washington's health-data law is unusually broad — and, notably, individuals can enforce it themselves.
Washington's My Health My Data Act (MHMDA), enacted in 2023 with most provisions effective in 2024, regulates "consumer health data" — a term defined broadly enough to include data that could reveal or be used to infer a person's health status. It generally requires consent before collecting or sharing such data and before using certain tracking technologies tied to it.
What makes MHMDA stand out is its enforcement: violations are treated as unfair practices under the Washington Consumer Protection Act, which carries a private right of action. That means individuals — not just the Attorney General — can bring claims, raising the stakes for any site whose pages could reveal health-related interest.
Whatever the statute, the underlying test is practical: do third-party trackers collect or transmit visitor data before the visitor consents? RegSentry runs a real browser against your site and shows you exactly that — which scripts fire, when, and whether a consent banner actually held them back.
See what fires on your site before consent — free, 30 seconds, no signup.
Real browser scan, no signup to run it. You see a summary of the findings; the full report with every tracker unlocks with your email.