Skip to content

Consumer Health Data Privacy Policy

Last updated

Draft for review. Not in force and not indexed. Open questions:

  1. Draft for Washington's My Health My Data Act (RCW 19.373), Nevada SB 370 and Connecticut's consumer health data rules. Not legally reviewed. These laws let consumers sue (Washington), so a US privacy lawyer should read it before launch.
  2. Washington requires a prominent link to this policy on the homepage. It is in the footer of every page, the homepage included; confirm that is prominent enough.
  3. Consent: the laws allow collection without consent only where it is necessary for a service the consumer asked for. Everything listed here is that. Sharing with the people you invite is at your direction. Confirm, and note the onboarding consent question in the privacy policy review.
  4. Appeals: Connecticut requires an appeal process. Written here as a reply to the same address within 60 days; confirm.