Tracked Laws
State Consumer Health Data Laws: Every U.S. Law Tracked (3)
Laws regulating consumer health data outside HIPAA. Maintained by Stauss PLLC. Last reviewed August 2026.
Laws tracked in this category3
| State | Law | Official text |
|---|---|---|
| Nevada | Nevada consumer health data law | N.R.S. ยง 603A.400, et seq. |
What You Need to KnowPassed in 2023, Nevada's law regulates the collection and use of consumer health data and biometric data. The law is similar in kind to Washington's My Health My Data Act but contains narrower definitions and does not have a private right of action. The law requires regulated entities to develop and maintain on their website a consumer health privacy notice. Regulated entities can collect consumer health data only with consent or if it is necessary to provide a product or service requested by a consumer. Regulated entities cannot share consumer health data unless they have the consumer's consent, it is necessary to provide the requested service, or it is authorized by law. Regulated entities cannot sell consumer health data absent a written authorization from the consumer. The law also creates consumer rights such as the right to deletion. | ||
| Virginia | Virginia consumer health data provisions | SB 754 Va. Code 59.1-200, et seq. |
What You Need to KnowThis 2025 amendment to Virginia's consumer protection act (as distinguished from its consumer privacy law) prohibits obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without the consent of the consumer in connection with a consumer transaction. The law is enforceable through a private right of action. | ||
| Washington | Washington My Health My Data Act | Chapter 19.373 RCW |
What You Need to KnowWashington's My Health My Data Act (MHMD) was the nation's first privacy law focused on regulating the collection and processing of consumer health data. The law strictly regulates the processing of consumer health data and is enforceable by the state attorney general and a private right of action. | ||
Questions about consumer health data laws?
Stauss PLLC advises companies on state privacy, AI, and data broker compliance.
Contact Stauss PLLCFollow consumer health data laws
Our analysis, by email, as the law moves.
This page is provided for general informational purposes only, is not legal advice, and does not create an attorney-client relationship. State laws change frequently; coverage reflects this tool’s most recent update. Contact Stauss PLLC to confirm how these requirements apply to your organization.