---
title: "Washington AI Law Tracker: 2026 | EFROS"
description: "Washington AI laws, pending bills, sector overlays, and compliance checklist. Citation-ready research from EFROS, updated quarterly. Edition 2026-Q2."
canonical: https://efros.com/research/state-ai-law-tracker/washington/
---

- [Home](https://efros.com/)
- /[Research](https://efros.com/research/)
- /[State AI Law Tracker](https://efros.com/research/state-ai-law-tracker/)
- /Washington

Primary Research · State Profile · WA

# Washington AI Law Tracker: 2026

Washington State's AI regulatory posture in 2026 is shaped less by a single comprehensive law and more by the My Health My Data Act (the country's strongest state health privacy law), the Washington Privacy Act overlays under consideration, and aggressive enforcement of existing consumer protection authority against AI-driven harms. Washington Attorney General Bob Ferguson has been notably active on AI-related consumer protection matters, and the Washington Legislature has introduced multiple AI bills in recent sessions covering algorithmic accountability, generative AI deepfake intimate imagery, and AI in employment. The 2024 My Health My Data Act (effective March 2024) extends well beyond HIPAA's scope and covers most AI deployments processing health-related data of Washington consumers.

Washington's regulatory posture in 2026 emphasizes consumer privacy as the operational lever for AI accountability. My Health My Data Act applies to a broad category of 'consumer health data', including data inferred from non-medical sources that could be used to predict health status, and captures the majority of consumer-facing AI applications doing health-related inference. The Act includes a private right of action with statutory damages. That makes Washington one of the highest-exposure jurisdictions for AI vendors processing any health-adjacent data of Washington consumers. The state has also been an early adopter of legislation criminalizing AI-generated deepfake intimate imagery and is actively considering legislation modeled on Colorado's deployer-developer framework, though no comprehensive Washington AI Act has yet been enacted.

By [Stefan Efros](https://www.linkedin.com/in/stefanefros-cyberdefense/), CEO & Founder, EFROS

Updated · September 11, 2026

## Enacted Washington AI laws

### Washington My Health My Data Act

in force

**Citation**

Wash. Rev. Code § 19.373

**Effective date**

2024-03-31

Key provisions

Consent required for collection, sharing, or sale of consumer health data; broad definition of 'consumer health data' including inferences; private right of action with statutory damages; geofencing restrictions around healthcare facilities; AG enforcement.

### Washington Fabricated Intimate Images Act (SB 5152)

in force

**Citation**

Wash. Rev. Code § 9A.86.010 et seq.

**Effective date**

2023-06-06

Key provisions

Criminal liability for disclosing AI-generated intimate images of an identifiable person without consent; civil cause of action; addresses deepfake content.

## Pending Washington AI legislation

### Washington Algorithmic Accountability Act

**Status**

Multiple drafts in recent sessions; pending

**Expected enactment**

Possible 2026 enactment

Would establish a developer-deployer framework similar to Colorado for high-risk AI systems. Multiple iterations have been introduced; advocacy groups continue pushing for enactment.

## Sector overlays in Washington

Sector-specific frameworks layer on top of state AI laws and frequently impose stricter or earlier-binding obligations. These are the sectors most exposed in Washington.

Healthcare and consumer health

My Health My Data is the binding constraint and reaches far beyond HIPAA: AI inferring health status from non-medical data triggers the Act.

Consumer technology

Apps and wearables doing health-related inference need My Health My Data consent and disclosure flows.

Platforms

AI-generated deepfake content of Washington residents creates criminal and civil exposure under SB 5152.

Employment

Washington Equal Pay Opportunity Act and Fair Chance Act overlay employment AI use; AG has signaled enforcement interest.

## Compliance checklist for Washington

Practical operational checklist for organizations subject to Washington AI laws. Items are ordered by typical sequence of implementation, not by importance: most steps depend on the inventory work in the first item.
- 1 ### Audit all consumer health data processing for My Health My Data scope Includes inferences. AI predicting menstrual cycles, mental health, fitness conditions from non-medical inputs is in scope.
- 2 ### Build explicit consent flows for consumer health data collection, sharing, and sale Required by the Act; consent must be specific, not bundled.
- 3 ### Document data minimization for AI processing of WA consumer data Required as part of the Act's reasonable security requirements.
- 4 ### Plan for private-right-of-action exposure with statutory damages Washington is one of the highest plaintiff-side jurisdictions for AI-adjacent health data claims.
- 5 ### Implement geofencing controls around healthcare facilities My Health My Data restricts location data collection within 2,000 feet of in-person healthcare facilities.
- 6 ### Build deepfake response protocols for platform clients SB 5152 creates both criminal and civil exposure for AI-generated intimate imagery.
- 7 ### Monitor Washington Algorithmic Accountability Act drafts Multiple iterations; structure may follow Colorado.

## How EFROS helps Washington businesses comply

EFROS operates Washington AI compliance with My Health My Data as the binding constraint for any consumer-health-adjacent AI deployment: consent UX, data minimization workflows, geofencing controls, and private-right-of-action exposure assessments. We also monitor Washington Algorithmic Accountability Act drafts for clients with Colorado-scale exposure.

[EFROS AI Governance service →](https://efros.com/services/ai-governance/?source=state-ai-tracker-washington) [Talk to Stefan Efros →](https://efros.com/contact/?source=state-ai-tracker-washington) [Run AI Risk Score →](https://efros.com/tools/ai-risk-score/?source=state-ai-tracker-washington)

Disclaimer: this profile is a research dataset, not legal advice. Compliance determinations for Washington businesses require analysis of specific facts and should be made in consultation with qualified legal counsel licensed in Washington.

## Cite this resource

Reference this resource with attribution under [CC-BY-4.0](https://creativecommons.org/licenses/by/4.0/). Copy any of the formats below for academic papers, blog posts, AI citations, or vendor evidence packages.

APA (7th edition)

```
Efros, S. (2026, May). Washington AI Law Tracker: 2026. EFROS. https://efros.com/research/state-ai-law-tracker/washington/
```

MLA (9th edition)

```
Efros, Stefan. "Washington AI Law Tracker: 2026." EFROS, May 2026, https://efros.com/research/state-ai-law-tracker/washington/.
```

Chicago (author-date)

```
Efros, Stefan. 2026. "Washington AI Law Tracker: 2026." EFROS. https://efros.com/research/state-ai-law-tracker/washington/.
```

IEEE

```
S. Efros, "Washington AI Law Tracker: 2026," EFROS, May 2026. [Online]. Available: https://efros.com/research/state-ai-law-tracker/washington/
```

BibTeX

```
@misc{efros2026washingtonailawt,
author = {Stefan Efros},
title = {Washington AI Law Tracker: 2026},
year = {2026},
month = {May},
publisher = {EFROS},
url = {https://efros.com/research/state-ai-law-tracker/washington/},
note = {Accessed: May 2026}
}
```

Plain text URL

```
https://efros.com/research/state-ai-law-tracker/washington/
```

Site-wide citation metadata is also published as a CITATION.cff file at [/CITATION.cff](https://efros.com/CITATION.cff) for citation-management tools and academic indexers.

Related EFROS resources

## More state AI law profiles & adjacent research

[### US State AI Law Tracker: full index All tracked US state AI laws in a single citation-ready dataset.Open→](https://efros.com/research/state-ai-law-tracker/) [### AI Vendor Governance Index 20 AI vendors scored on 12 US AI governance axes, including state-law overlays.Open→](https://efros.com/research/us-ai-vendor-governance-index/) [### NIST AI RMF Implementation Guide Federal framework that anchors most state AI law deployer obligations.Open→](https://efros.com/resources/nist-ai-rmf-implementation-guide/) [### EFROS AI Governance service Operating program that implements multi-state AI law compliance.Open→](https://efros.com/services/ai-governance/) [### AI Risk Score 5-minute classification across Colorado SB 26-189 (amended AI law), NYC LL144, CA AB 2013, and NIST AI RMF.Open→](https://efros.com/tools/ai-risk-score/)