Updated as of February 2024

Washington Consumer Health Data Privacy Policy

This notice supplements the Automaticity Privacy Notice and applies to personal data defined as “consumer health data” subject to the Washington My Health My Data Act (MHMDA).

Consumer Health Data We Collect. We described the types of personal data we collect in our Privacy Policy. If you have not read it, we urge you to do so. You can access it here. Our products and services strive to help consumers and your health care better serve you. In doing so, we may collect, use, and disclose consumer health data of Washington Consumers. Because consumer health data is defined very broadly, many of the categories of data we collect could also be considered consumer health data. Specifically, consumer health data is defined for purposes of this Washington MHMDA policy as personal information that is linked or reasonably linkable to a Washington Consumer and that identifies the Washington Consumer’s past, present, or future physical or mental health status.

Examples of consumer health data may include:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions).
• Social, psychological, behavioral, and medical interventions.
• Measurements of bodily functions, vital signs, characteristics (including photographs, which may also be considered biometric information under the MHMDA), and other types of consumer health data (including physical descriptions, health history, tests, health insurance information, reproductive health information, or sex).
• Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies.
• Genetic Data that could concern your genetic characteristics, which may include physical characteristics, health history, tests, familial genetic information, and other medical information.
• Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health, including psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
• Other information that may be used to infer or derive data related to the above or other health information.

We will not collect, use, or share additional categories of consumer health data not disclosed in this Washington Privacy Notice without first disclosing the additional categories and obtaining your affirmative consent prior to the collection, use, or sharing of that health data. Please note that consumer health data protected by this statute does not include data that cannot reasonably be used to infer information about, or otherwise be linked to, you (“deidentified data”). 

Sources and Recipients of Consumer Health Data. We may collect your consumer health data from and/or disclose your data to, and in the preceding 12 months we have collected from and/or disclosed your consumer health data to, one or more of the following parties:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions).
• Social, psychological, behavioral, and medical interventions.
• You, and direct interactions between you and your health care professional.
• Third-party or publicly available sources.
• Your health care professionals and providers.
• Data providers, such as marketing and other data analytics providers.
• Digital marketing providers, such as social media.
• Mutual service providers, such as companies who may assist us in fulfilling our contracts and carrying out our business.
• Technology providers, such as communication compliance providers and electronic document management vendors.
• Government agencies, such as law enforcement, when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
• Other third parties when, in certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.

Why We Collect and Use Consumer Health Data. We collect and use consumer health data as reasonably necessary to provide you and your health care professionals and providers with the products you have requested or authorized. This may include, for example, some of the specific categories above for delivering and operating the products and their features, personalization of certain product features, ensuring the secure and reliable operation of the products and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, and conducting research and development).

Our Sharing of Consumer Health Data. We may share each of the categories of consumer health data, with your consent or as reasonably necessary, to complete any transaction and assist your healthcare professionals and providers with providing you with healthcare services. We may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal processes.

Your Privacy Choices and Rights. You may have the right to request that we delete any of your consumer health data collected from you and retained by us. You have the right to confirm our compliance to this policy, to request to withdraw your consent, and to process of these rights. We may need additional information to process your request, including if someone is acting on your behalf. We may deny your request if retaining the consumer health data is reasonably necessary for our use (or our affiliates, processors, contractor(s), or third parties) in order to:

• Prevent, detect, protect against or respond to security incidents; identify theft, fraud or malicious or deceptive activities; or any activity that is illegal under Washington State or federal law;
• Preserve the integrity or security of systems; or,
• Investigate, report, or prosecute those responsible for any such action that is illegal under Washington state or federal law.

How to Exercise Your Rights. MHMDA provides certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can contact us at:

info@automaticity.ai

Attn: Privacy

Automaticity, Inc.

4250 Martin Way E 105-245

Olympia, Washington 98516

If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting our privacy support team. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.