Artificial IntelligenceRegulations
United States

Washington

Partially in forceApproach: Targeted statutes: health data now, chatbots and provenance next

Washington regulates AI through targeted statutes rather than a framework. The My Health My Data Act, with its private right of action, already reaches AI systems handling consumer health data and inferences. In March 2026 the governor signed two more: HB 2225 on companion chatbots, effective January 1, 2027, and HB 1170 on content provenance, effective February 1, 2027, extending the pattern of narrow, enforceable rules.

Key points

  • My Health My Data Act (2023 to 2024 phase-in) covers health data broadly, including inferences AI systems draw, with a private right of action.
  • HB 2225 (companion chatbots) and HB 1170 (provenance) were signed March 24, 2026 and take effect January 1 and February 1, 2027.
  • AI-in-government statutes and health-insurer AI restrictions add to the targeted stack; no comprehensive consumer AI law yet.

Laws and instruments

My Health My Data Act (applied to AI)

Wash. Rev. Code ch. 19.373
In force

Consumer health data privacy statute with a private right of action, covering data AI systems collect or infer about health status.

Effective: Phased from March 31, 2024
Primary source: Washington State Legislature, RCW 19.373 ↗

HB 2225 (companion chatbots) and HB 1170 (AI content disclosure)

Chapters 168 and 167, Laws of 2026; signed March 24, 2026
Phasing in

HB 2225 regulates AI companion chatbots, and violations are enforceable under the Consumer Protection Act, private suits included. HB 1170 requires informing users when content is created or modified by AI and is enforced only by the attorney general.

Effective: HB 2225 January 1, 2027; HB 1170 February 1, 2027
Primary source: Washington Legislature, session law (HB 2225) ↗

Timeline

  • April 2023
    My Health My Data Act signed.
  • March 31, 2024
    MHMD fully effective for regulated entities.
  • March 24, 2026
    Governor signs HB 2225 and HB 1170.
  • July 1, 2026
    The attorney general's AI Task Force issues its final report, noting four recommendations enacted in the 2026 session and proposing a permanent advisory body.
  • January 1, 2027
    HB 2225 companion-chatbot rules take effect.
  • February 1, 2027
    HB 1170 content-provenance rules take effect.

Who it applies to

Follows the Washington consumer: health-data duties, chatbot rules, and provenance requirements attach to products reaching state residents.

Penalties

MHMD violations are enforceable by the Attorney General and through private suits under the Consumer Protection Act.

Common questions

Does Washington have a comprehensive AI law?
No. Washington regulates AI through targeted statutes rather than a framework. The My Health My Data Act, with its private right of action, already reaches AI systems handling consumer health data and inferences. In March 2026 the governor signed two more: HB 2225 on companion chatbots, effective January 1, 2027, and HB 1170 on content provenance, effective February 1, 2027, extending the pattern of narrow, enforceable rules.
What are the penalties for AI violations in Washington?
MHMD violations are enforceable by the Attorney General and through private suits under the Consumer Protection Act.
Who does AI regulation in Washington apply to?
Follows the Washington consumer: health-data duties, chatbot rules, and provenance requirements attach to products reaching state residents.
Related topics
Transparency and disclosureDeepfakes and synthetic media
Cite this page

Artificial Intelligence Regulations, "AI Regulation in Washington," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/washington.html.

Entries state the position as of the review date and link to the primary text for verification.