Washington My Health Data Act

Real Life Community Behavioral Health is committed to protecting your personal health information in full compliance with Washington State's My Health Data Act (RCW 19.373) and all applicable federal privacy laws.

RLCBH's Privacy Policy

Real Life Community Behavioral Health prioritizes privacy and rigorously adheres to State and Federal Privacy Acts and the HIPAA Privacy Rule. We are committed to ensuring the privacy and security of our clients' personal information.

📋 Information We Collect

As a healthcare provider who accepts insurance, we collect only what is necessary to provide care and process billing. This includes:

  • Legal first and last name
  • Legal gender
  • Address
  • Date of birth
  • Emergency contact
  • Contact information (email and/or phone number)
  • Insurance ID and Group number

🔒 How We Protect Your Data

We take the security of personal information seriously and employ security measures to protect against unauthorized access or disclosure. Personal information is stored on secure servers and is accessible only to authorized personnel.

🚫 Information Sharing

We do not sell, trade, or rent personal information to third parties. Real Life Community Behavioral Health will not disclose a client's personal information to any entity or individual without the client's written consent.

Any third party in contract with RLCBH mirrors our privacy policy through a Business Associate Agreement (BAA) and is unauthorized to mine our clients' Electronic Protected Health Information (ePHI).

🍪 Cookies

Our website may use cookies to enhance the user experience and collect information about usage patterns. Users have the option to accept or decline cookies. However, declining cookies may limit the functionality of the website.

All information is collected exclusively through our website. While cookies may store your information, using an incognito browser can prevent this.

📝 Changes to This Policy

We reserve the right to modify this privacy policy at any time. Any changes will be posted on our website with the updated effective date. By using our website or providing personal information to us, you consent to the collection, use, and disclosure of personal information in accordance with this policy.

If you have any questions or concerns about this privacy policy, please contact our front desk.

What the law requires

The Washington My Health Data Act (effective March 31, 2024) establishes requirements for how regulated entities and small businesses collect, share, and protect consumer health data. Here are the key provisions.

RCW 19.373.020

Consumer Health Data Privacy Policy

Regulated entities must maintain and prominently publish a consumer health data privacy policy disclosing: the categories of data collected and why, the sources of that data, what data is shared, which third parties receive it, and how consumers can exercise their rights.

RCW 19.373.030

Collection & Sharing of Consumer Health Data

Consumer health data may only be collected or shared with explicit consumer consent for a specified purpose, or when strictly necessary to provide a requested product or service. Consent to share data must be separate and distinct from consent to collect it.

RCW 19.373.040

Consumer Rights

Consumers have the right to confirm whether their health data is being collected, to access that data, to withdraw consent, and to request deletion. Regulated entities may not discriminate against consumers for exercising these rights.

RCW 19.373.050

Data Security Practices

Regulated entities must restrict access to consumer health data to only those employees and contractors for whom access is necessary, and must implement administrative, technical, and physical security practices appropriate to the volume and sensitivity of the data.

RCW 19.373.080

Geofence Restrictions

It is prohibited to implement a geofence around any healthcare facility for the purpose of identifying, tracking, or sending notifications to consumers seeking healthcare services.

RCW 19.373.090

Consumer Protection Act Application

Violations of the My Health Data Act are treated as unfair or deceptive acts in trade or commerce under Washington's Consumer Protection Act (RCW 19.86), making violations subject to enforcement and penalties under that act.

Read the full text of RCW 19.373 at the Washington State Legislature →