Washington state passes broad health data bill
April 11, 2023
Want to receive these weekly privacy recaps in your inbox? Sign up for our privacy newsletter, A Little Privacy, Please.
ICO Fines TikTok for UK GDPR Violations
The UK Information Commissioner’s Office (ICO) announced a 12.7 pound million fine based on allegations that TikTok used children’s data without parental consent, failed to carry out adequate checks to identify and remove underage children from its platform, and failed to provide easy-to-understand information about how user data was collected, used and shared.
The UK Age Appropriate Design Code, which went into effect in September 2021, sets out specific protections for children’s personal data in compliance with the provisions of the UK GDPR.
According to the ICO’s explanation of the Code “if you don’t conform to the standards in this code, you are likely to find it more difficult to demonstrate that your processing is fair and complies with the GDPR and PECR.”
Of particular relevance for this case, the code standards require that covered companies “either establish age with a level of certainty that is appropriate to the risks to the the rights and freedoms of children that arise from your data processing, or apply the standards in this code to all your users instead.”
Washington State Passes Broad Health Data Bill
HB1155, a bill addressing the collection, sharing, and selling of consumer health data, has passed both the Washington House and (with amendments) the Senate.
If the amendments are approved by the House, and the bill is signed by the Governor, the My Health My Data Act will go into effect March 31, 2024.
Among other requirements, the law would require consent (specific to each purpose) for the collection or sharing of “Consumer health data”, which is broadly defined to include not only information that directly identifies a consumer’s physical or mental health, but also information derived or extrapolated from nonhealth information, including from algorithms or machine learning.
Texas Passes Comprehensive Privacy Bill Through One Chamber
The Texas House passed HB4, a bill largely resembling the Virginia Consumer Data Protection Act. The bill will now move to the Senate for consideration.
This is the seventh state to pass comprehensive privacy legislation through one chamber in 2023, with only one state so far this year, Iowa, signing such a bill into law.
Want more of the privacy highlights that matter to adtech and martech? Sign up for our privacy newsletter, A Little Privacy, Please.
A Little Privacy, Please weekly recaps are provided for general, informational purposes only, do not constitute legal advice, and should not be relied upon for legal decision-making. Please consult an attorney to determine how legal updates may impact you or your business.
Latest Blog Posts
California Attorney General Bonta announced a settlement with Doordash based on...
Explore the intricate landscape of Consent or Pay models...
A blog post from the FTC reminded companies that simply changing...
Latest White Papers
The current state of publisher compliance with CCPA, and...
How to review your vendor list to mitigate compliance...
Keep in touch
Sign up for our newsletter to keep up with privacy news for adtech and martech,
plus occasional company news.