Bill > HB1616

This bill creates the "People's Privacy Act" in Washington state, which establishes a charter of personal data rights for individuals residing in the state. The key provisions include: - Requiring covered entities (businesses meeting certain revenue and data processing thresholds) to provide clear and prominent privacy notices, obtain opt-in consent before processing personal information, and implement reasonable data security practices. - Granting individuals rights to know what personal information is being processed about them, access and transfer their data, correct inaccuracies, and delete their information with some exceptions. - Prohibiting covered entities and government agencies from using personal data in a discriminatory manner or deploying certain surveillance technologies without consent. - Establishing enforcement mechanisms, including a private right of action and civil penalties, for violations of the act. - Providing exemptions for certain data processing activities related to core business functions, emergencies, and compliance with legal requirements. The bill also includes specific requirements for the handling of biometric data and exclusions for certain entities and data types. The effective date for the private right of action is July 1, 2024, while the act generally applies to nonprofit corporations starting July 31, 2025.