The proposed bill aims to enhance personal data privacy in Washington state by establishing a new chapter in Title 19 RCW that defines regulations for the collection and processing of personal data. It introduces key concepts such as "affirmative consent," which mandates clear authorization from consumers for data processing, and "consumer health data," which includes a broad range of health-related information. The bill emphasizes transparency in obtaining consent, ensuring consumers are informed about data usage and their rights. It applies to businesses in Washington that handle personal data while excluding government entities and their contractors.

Additionally, the bill grants consumers new rights regarding their personal data, including the ability to confirm data collection, access, correct inaccuracies, delete data, and opt out of targeted advertising. It requires data controllers to respond to consumer requests promptly and outlines their responsibilities in data handling, including limited data collection and robust security practices. The legislation also prohibits the sale of sensitive data without explicit consent and establishes a framework for data processors to follow. Enforcement mechanisms are included, allowing the attorney general to address violations, with certain provisions taking effect on August 1, 2026. Overall, the bill seeks to strengthen consumer privacy rights and ensure responsible data management practices.