The proposed bill seeks to enhance personal data privacy in Washington state by establishing a new chapter in Title 19 RCW that defines key terms and regulations related to the collection and processing of personal data. It introduces concepts such as "affirmative consent," which requires clear authorization from consumers for data processing, and "consumer health data," which includes a variety of health-related information. The bill applies to businesses that collect or process personal data from Washington residents, while exempting government entities and their contractors. It aims to empower consumers by granting them control over their personal data and ensuring transparency in how it is used.

Additionally, the bill outlines new consumer rights, including the ability to confirm data collection, access and correct their data, delete it, and opt out of targeted advertising. It mandates that data controllers respond to consumer requests within 45 days and provides an appeal process for denied requests. The bill also emphasizes the responsibilities of data controllers and processors, requiring them to implement robust data security practices and limiting data collection to what is necessary. It prohibits the sale of sensitive data without consent and establishes guidelines for handling data related to minors. Enforcement provisions are included, designating violations as unfair or deceptive acts under the consumer protection act, and ensuring that consumer rights cannot be waived through contractual provisions.