AI Regulation in Washington: Laws, Status and Penalties

Washington regulates AI through targeted statutes rather than a framework. The My Health My Data Act, with its private right of action, already reaches AI systems handling consumer health data and inferences. In March 2026 the legislature passed two more: HB 2225 on chatbots and HB 1170 on content provenance, extending the pattern of narrow, enforceable rules.

Key points

My Health My Data Act (2023 to 2024 phase-in) covers health data broadly, including inferences AI systems draw, with a private right of action.
HB 2225 (chatbots) and HB 1170 (provenance) passed the legislature in March 2026.
AI-in-government statutes and health-insurer AI restrictions add to the targeted stack; no comprehensive consumer AI law yet.

Laws and instruments

My Health My Data Act (applied to AI)

Wash. Rev. Code ch. 19.373

In force

Consumer health data privacy statute with a private right of action, covering data AI systems collect or infer about health status.

Effective: Phased from March 31, 2024

Primary source: State-by-state AI law guide ↗

HB 2225 (chatbots) and HB 1170 (provenance)

Washington Legislature, 2026 session

Partially in force

Chatbot safeguards and AI content provenance requirements passed by the legislature in March 2026; check current effective dates before relying on them.

Effective: 2026 session enactments

Primary source: State AI law update, March 2026 ↗

Timeline

April 2023
My Health My Data Act signed.
March 31, 2024
MHMD fully effective for regulated entities.
March 2026
Legislature passes HB 2225 and HB 1170.

Who it applies to

Follows the Washington consumer: health-data duties, chatbot rules, and provenance requirements attach to products reaching state residents.

Penalties

MHMD violations are enforceable by the Attorney General and through private suits under the Consumer Protection Act.

Common questions

Does United States: Washington have a comprehensive AI law?

United States: Washington has a dedicated AI regime. Washington regulates AI through targeted statutes rather than a framework. The My Health My Data Act, with its private right of action, already reaches AI systems handling consumer health data and inferences. In March 2026 the legislature passed two more: HB 2225 on chatbots and HB 1170 on content provenance, extending the pattern of narrow, enforceable rules.

What are the penalties for AI violations in United States: Washington?

MHMD violations are enforceable by the Attorney General and through private suits under the Consumer Protection Act.

Who does AI regulation in United States: Washington apply to?

Follows the Washington consumer: health-data duties, chatbot rules, and provenance requirements attach to products reaching state residents.

Cite this page

Artificial Intelligence Regulations, "AI Regulation in Washington," reviewed July 16, 2026, https://artificialintelligenceregulations.com/jurisdictions/washington.html.

Entries state the position as of the review date and link to the primary text for verification.