Binding law — in force
Obtain consent before collecting biometric data from face or voice features (Washington My Health My Data Act)
Washington treats biometric data, including face and voice imagery from which an identifier template can be extracted, as consumer health data. Since 2024-03-31 a regulated entity (small businesses since 2024-06-30) may collect it only with the consumer's prior, opt-in consent for a specified purpose or to the extent necessary to provide a product or service the consumer requested; the consent request must disclose the categories, purpose, recipients and how to withdraw. Health inferences derived by algorithms or machine learning are consumer health data as well. Detect face or voice template extraction with no consent gate where the processing goes beyond the feature the consumer asked for.
wa-mhmda.biometric-data-collection-consent · RCW 19.373.030(1)(a) · official source · jurisdictions: US-WA