We are tracking 50+ companies that sent data breach notification letters to Washington residents and reported to the Washington Attorney General. If you received a notice, you may qualify for compensation — at no cost to you.
My Health MY Data Act (MHMD) & Washington Consumer Protection Act (CPA)
Washington enacted the My Health MY Data Act in 2023 — the strongest health data privacy law in the country outside of HIPAA. MHMD covers consumer health data not protected by HIPAA and provides a private right of action with no cap on damages. The Washington CPA also provides a private right of action for data security violations.
Washington residents with health data exposed have exceptionally strong protections under MHMD's private right of action — they can sue directly without going through the AG. This is one of the most powerful breach remedies in the country.
Showing 50 most recent notification letters · Washington has additional cases on file
Received a data breach notification letter from a company in Washington? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →