Washington’s My Health My Data Act is now in effect and significantly expands the scope of regulated information to any “consumer health data” that identifies a consumer's past, present, or future physical or mental health status. The Act has broad applicability for businesses, including non-profits, that offer goods or services to Washington residents, and there is no applicability threshold. Among the requirements is the posting of a separate consumer health privacy notice on the business’s website.