2021 State Bills Washington 2021 SB 5062

Summary

Prohibits a data controller from processing sensitive data concerning a consumer without obtaining the consumer's consent or, in the case of the processing of sensitive data of a known child, without obtaining consent from the child's parent or lawful guardian, in accordance with the children's online privacy protection act requirements. Data controllers must conduct and document a data protection assessment of processing activities involving personal data, including sensitive data such as genetic data. Carries over to 2022.