Washington My Health My Data Act Privacy Notice
Effective Date: January 2026
This Notice explains how Emergent BioSolutions (“Emergent,” “we,” “our”) collects, uses, and shares your consumer health data in compliance with Washington’s My Health My Data Act (“WA MHMDA”), Chapter 19.373 RCW, when you visit our websites, product pages, or use online forms.
1. Background & Scope
Washington’s My Health My Data Act was enacted to close privacy gaps outside of traditional HIPAA protections. It recognizes health data—even when collected by non-HIPAA entities—as highly sensitive and mandates consumer rights, restrictions, and enforceable protections. The law requires:
- Clear disclosures and consent for collection and sharing
- Rights to access, delete, or opt-out of processing
- Strict controls on selling data (requires written, signed authorization)
- Ban on geofencing around healthcare facilities
2. Information We Collect
We gather consumer health data under WA MHMDA when you:
- Visit health, or wellness, related product sites
- Complete web forms—such as registrations, product inquiries, or symptom checks
- Use features like symptom checkers, product recommendations, or support tools
Examples of the type of data we may collect include:
- Health conditions (e.g., diabetes, allergies)
- Symptom details (e.g., headaches, fatigue)
- Medication interests (e.g., inquiries about vaccine options)
- Vital signs or biometric data (e.g., blood pressure, lab results)
- Reproductive or gender-affirming health inquiries
- Geolocation data tied to health services usage (if permitted)
- Inferred health information, such as inferred stress levels, wellness trends, or predicted conditions
3. How We Use Your Health Data
We process your data only with your explicit, opt-in consent, unless necessary to fulfill your requests (e.g., responding to product inquiries). Uses include:
- Delivering requested product details, services, or customer support
- Enhancing functionality and usability of our digital platforms
- Fulfilling legal, regulatory, or compliance obligations under WA MHMDA and other laws
4. How We Share Your Health Data
- We never sell your consumer health data.
- We may share data with trusted service providers (e.g., website hosting, analytics, IT support), always bound by strict contractual privacy and security standards.
- We may share data to comply with legal obligations, including law enforcement requests or legal proceedings.
5. Your Rights Under WA MHMDA
You have strong rights, including:
- Access & Confirmation: Ask whether we hold your data, and receive a copy.
- Deletion: Request permanent removal of your data from our records.
- Consent Withdrawal: Opt-out of future collection or sharing at any time.
- Non-Discrimination: We won’t treat you unfairly for exercising your rights.
- Privacy List: You can request a list of third parties or affiliates with whom we’ve shared your data.
6. How to Exercise Your Rights
You can exercise these rights by contacting us at privacy@ebsi.com. Please clearly specify the right you wish to invoke (e.g., “Request deletion of my consumer health data”). We’ll verify your request and respond within the timeframe mandated by WA MHMDA.
7. Consent & Cookies
Your continued use of our websites and submission of health-related forms constitutes consent for collection and processing as described. You may also manage cookie preferences via our cookie center or your browser settings.
8. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your data from unauthorized access, consistent with WA MHMDA requirements.
9. Changes to This Notice
We may update this Notice to reflect changes in laws or our practices. Revised versions will include a new “Effective Date.”
Contact Us:
For questions or to exercise your rights under WA MHMDA, email us at privacy@ebsi.com. Thank you for trusting Emergent with your sensitive health data.
FAQ
Q: What is considered consumer health data?
A: Any information linked to your physical or mental health, including symptoms, conditions, medications, or inferred health trends.
Q: Does Emergent sell my health data?
A: No. We do not sell consumer health data under any circumstances.
Q: How do I withdraw consent?
A: Email us at privacy@ebsi.com with your request, and we will process it promptly.