Technology (Privacy)

HB 2332 regulates how Washington state and local agencies use automated license plate reader (ALPR) systems to protect driver privacy. It requires all agencies using ALPRs to register systems with the Attorney General, limits their use to specific purposes (like checking stolen vehicles or missing persons), and prohibits collecting data near healthcare facilities, schools, or places of worship. The bill mandates detailed audit trails tracking every system access and explicitly bans using ALPRs for immigration enforcement or stopping vehicles based solely on a system match. Agencies must develop policies for ALPR use and obtain independent reasonable suspicion before stopping a vehicle, ensuring privacy rights under state and federal law.

HB 2606 creates an Office of Privacy and Data Protection within Washington State's government to centralize data privacy oversight. It requires the office to conduct annual privacy reviews and training for state agencies, develop privacy best practices, coordinate data protection efforts (including for AI projects), and serve as a resource for local governments and the public on data privacy. The bill mandates that the office submit detailed performance reports to the legislature every four years, tracking metrics like training participation, public contacts, privacy assessments completed, and coordination with privacy experts. These reports must demonstrate progress on improving privacy policies and practices across state agencies and local governments.

HB 2637 expands exemptions under Washington state law to protect specific sensitive personal information from public disclosure. It directly affects students, healthcare patients, taxpayers, and individuals using public services by exempting data like student records, medical information, financial details (e.g., credit card numbers), geolocation data, driver's license records, and utility account information. Key provisions clarify that agencies cannot release this information unless required by other law, with limited exceptions for emergencies or legal mandates. The bill updates existing privacy protections to cover new data types, such as precise location coordinates and consumer utility data, while maintaining transparency requirements for certain disclosures like total license plate numbers.

This resolution (HR 4609) formally recognizes Data Privacy Day on January 28th, as established by U.S. Congress in 2009. It does not create new laws or impose requirements; instead, it serves as a symbolic gesture to raise public awareness about data privacy. The resolution highlights the importance of protecting personal information in digital interactions and encourages Washington residents to learn about privacy best practices. It aligns with global observances in 50 countries and emphasizes education for individuals, businesses, and governments. As a procedural resolution, it has no direct regulatory impact or effect on specific groups.