{"page":"/blog/washington-my-health-my-data-act-advertising","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Component","Section that applies","What changes under the text"],"rows":[["Pixels and tags on health pages",".030 collect and share","Two prior consents, unless the recipient is a processor acting within the original purpose"],["Mobile SDKs",".010(8)(b)(xi), .030","Location or app-usage data that implies care-seeking needs the same two consents"],["Audience building and lookalikes",".010(5), (8)(b)(xiii)","Inferring a health segment is collection; using it on third-party media is sharing"],["Conversion events and measurement",".010(27), .060","Sending \"booked a consult\" to a platform is sharing unless the platform works as a processor"],["Data partnerships and audience sales",".070","Per-person signed authorization, one-year expiry, six-year retention"],["Location targeting",".080","No geofence within 2,000 feet of in-person care sites for the listed purposes"],["Vendor contracts",".060","Binding processing instructions; a vendor outside them becomes a regulated entity"],["Deletion requests",".040(1)(c)","Delete within 45 days and notify every affiliate, processor and third party that received the data"]],"sourceUrls":[[],[],[],[],[],[],[],[]]}