This bill establishes a firewall to prevent Washington state agencies from sharing driver, vehicle, and personal information with federal immigration authorities for civil immigration enforcement purposes. It requires state departments to only disclose such data when a valid court order is issued and mandates notification to individuals within three days when their information is requested. The legislation also requires data-sharing agreements to include certifications that information will not be used for civil immigration enforcement, along with ongoing monitoring and termination of access if misuse is detected. Additionally, the bill mandates annual reports on data queries and public meetings to discuss compliance and statistics regarding information access.
HB 2491 exempts certain personal information collected by Washington Technology Solutions (WaTech) from public record disclosure requirements. It directly affects WaTech, the state’s centralized IT agency, and all state agencies using its services, by creating a confidentiality shield for identifying personal data they handle. The bill amends state law to define "agency" as WaTech and establishes that personal information submitted to it for IT services is exempt from public inspection under RCW 42.56.010, ensuring such data remains confidential. This change aims to protect individual privacy while WaTech delivers IT services to state agencies, without altering how agencies must collect or correct data.
SB 6164 exempts certain identifying personal information handled by Washington Technology Solutions (WaTech) from public inspection under the state's public records law. It directly affects WaTech, state agencies using its services, and individuals whose data is processed through WaTech systems. The bill creates a specific exemption for "identifying personal information" submitted to WaTech, ensuring such data cannot be disclosed through public records requests, while maintaining existing requirements for data accuracy and correction mechanisms. This change strengthens privacy protections for personal data collected through WaTech's centralized IT services.
SB 6002 limits how Washington state and local agencies can use automated license plate reader (ALPR) systems, which track vehicle movements. It requires agencies to register ALPR systems with the attorney general and maintain detailed records of all system access (like who used it and why), while prohibiting use for immigration enforcement, in healthcare facilities, schools, or places of worship. Agencies may only use ALPRs for specific purposes, such as checking against stolen vehicle lists, missing persons databases, or parking enforcement. The law aims to balance public safety with privacy by restricting data collection and ensuring transparency in how license plate data is accessed and stored.
HB 2606 creates an Office of Privacy and Data Protection within Washington State's government to centralize data privacy oversight. It requires the office to conduct annual privacy reviews and training for state agencies, develop privacy best practices, coordinate data protection efforts (including for AI projects), and serve as a resource for local governments and the public on data privacy. The bill mandates that the office submit detailed performance reports to the legislature every four years, tracking metrics like training participation, public contacts, privacy assessments completed, and coordination with privacy experts. These reports must demonstrate progress on improving privacy policies and practices across state agencies and local governments.
SB 6123 protects sensitive personal information of Washington state local government employees and volunteers by exempting it from public disclosure under the Public Records Act. It specifically shields residential addresses, phone numbers, email addresses, Social Security numbers, driver's license details, emergency contacts, and demographic data (like race, sexual orientation, or disability status) from public records requests. The bill also allows employees or dependents who are survivors of domestic violence, sexual assault, or stalking to request redaction of their personal information through a sworn statement or proof of participation in an address confidentiality program. News media retains limited access to some information under defined conditions, but agencies must redact identifying details in investigation records after completing probes into workplace issues. This bill directly affects all local government employees and volunteers whose personal data is held in personnel records.
HB 2380 requires financial institutions offering mobile or internet banking apps to clearly disclose how they collect, store, or share consumer personal information - beyond what's necessary for essential services - and gives users the right to opt out of non-essential data collection or sharing with third parties. It directly affects consumers using banking apps and the financial institutions providing them, mandating transparent notices about data practices before users access services. Key provisions include requiring opt-out options for non-essential data use (like marketing or third-party sharing) and exempting data collection strictly needed for core banking functions. Violations are treated as unfair trade practices under Washington's consumer protection law, with potential damages of $7,500 per violation. The bill focuses on concrete disclosure and user control, not on speculative outcomes.
SB 6106 updates Washington’s law on notifying laid-off employees by excluding Indian tribes from the definition of "employer," meaning tribal employers will no longer be subject to the law’s notice and benefit requirements. It also adds a new exemption protecting employee names and addresses from public disclosure under the state’s open records law. These changes amend specific sections of Washington law (RCW 49.45.010 and RCW 42.56.230) to clarify who must comply and strengthen privacy safeguards for affected workers. The bill directly impacts tribal employers (no longer covered) and all employees whose personal information is now shielded from public access in employment records.
HB 2481 bans grocery stores from using computer systems to charge different prices based on personal data like shopping habits, location, or inferred characteristics (e.g., income or race). It also requires a four-year temporary pause on all electronic shelf label systems that could collect consumer data from devices to adjust prices. The law directly affects grocery retailers using dynamic pricing technology, exempting small businesses. It aims to ensure prices remain fair and transparent, preventing personalized pricing without clear disclosure. The bill defines key terms like "inferred data" and "electronic shelf label systems" to clarify these prohibitions.
SB 6312 bans grocery stores from using personal data - like shopping habits, location, or inferred traits - to charge different prices to individual shoppers (surveillance-based price discrimination) or raise prices during high demand (surge pricing). It specifically targets large grocery retailers (excluding small businesses under state law) and requires all prices to be clearly posted and consistent for all customers. The bill also imposes a four-year moratorium on electronic shelf label systems that collect consumer data to modify prices, to study impacts on transparency and jobs. This law aims to ensure fair pricing by preventing retailers from exploiting personal information for dynamic pricing.
