Skip to content
Patent PendingLLM→LLMMarketplace
Beta — Live system under active development. Expect occasional hiccups. Patent Pending

Health Data — Rules by State

Every state has different rules for selling personal health data. Our consent flow handles state-specific requirements automatically. Here's what applies based on your location.

Washington

My Health My Data Act (RCW 19.373)
  • Requires written authorization for each sale (handled in our consent flow)
  • Authorization must include 10 specific elements
  • Records retained for 6 years
  • You can revoke authorization anytime from your dashboard
  • Enforced via private right of action

Illinois

Genetic Information Privacy Act (410 ILCS 513)
  • Additional authorization required for genetic data
  • Buyers cannot use genetic data for employment or insurance decisions
  • Violations: $2,500–$15,000 per violation

California

CCPA/CPRA (Cal. Civ. Code § 1798.140)
  • Health data is "sensitive personal information"
  • Rights to know, delete, limit use, and opt out
  • Handled in our consent flow

Nevada

SB 370 (2023)
  • Similar framework to Washington
  • Enforced by Attorney General

All other states

General consumer protection laws
  • General consumer protection laws apply
  • Sellers and buyers are responsible for local compliance
Important

We are NOT a covered entity under HIPAA. HIPAA restricts healthcare providers, insurers, and health plans — not individuals selling their own records. You have the right to sell data you own. Multiple companies already facilitate this in the US. State laws regulate HOW consent is collected, not WHETHER you can sell your own data.

Ready to list? Sell your health data — the consent flow walks you through your state's requirements.Terms & addendum