United States · compare states
Hawaii and Washington: health record laws compared
Hawaii and Washington, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on health data outside HIPAA, getting a copy, health information exchange, right to sue, breach notice and AI in care, and the same answer on everything else.
The seven questions, side by side
"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.
| Question | Hawaii | Washington |
|---|---|---|
| Health data outside HIPAADo apps and wearables need your OK before sharing health data?differs | No law foundWe searched the official code and found none.How we searched | Opt-in, written OK to sellYes. A consumer health data law requires your OK before a business collects or shares health data, and your signed permission before it sells it.RCW 19.373.030; RCW 19.373.070 |
| Getting a copyDo you get a copy faster or free in some cases?differs | NeitherNo. A law is in force, but it adds nothing to HIPAA's terms.HRS 622-57; HRS 622-57(b) | Faster, and free in some casesYes, both. A deadline shorter than 30 days, and a free copy in at least one case.RCW 70.02.080; RCW 70.02.030(2)(b) |
| Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?differs | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.Hawaii HIE Operational Policy HEN-009, section 4.5; Hawaii HIE Operational Policy HEN-007, section 4.2.1 | No general choiceNo general choice. Sharing through the exchange follows HIPAA's rules, and no state rule or exchange policy offers a general choice.OneHealthPort HIE Participation Agreement, Version 1, effective 2026-07-01; RCW 41.05.039 |
| Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available. | ||
| Reproductive health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.HRS 323J-2, as amended by Act 59, SLH 2026 (HB1875 HD2 SD2), section 3; HRS 323J-2 (L 2023, c 2) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.RCW 7.115.020(3) |
| Mental health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.HRS 334-5 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Another law is signed and takes effect June 30, 2027.RCW 70.02.230; RCW 70.02.230 (as amended by Laws of 2025 ch. 58 sec. 5129) |
| HIV recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.HRS 325-101 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.RCW 70.02.220; RCW 70.24.017(12) |
| Genetic recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.HRS 431:10A-118(a)(3) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.RCW 26.26A.355 |
| Right to sueCan you sue if your records are misused?differs | Narrow case onlyOnly in a narrow case, such as a data breach or one kind of record. The laws below say which.HRS 487N-3(b); HRS 325-102 | Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.RCW 70.02.170; RCW 19.373.090 |
| Breach noticeMust you be told if health data leaks in a breach?differs | NeitherNo. The breach notice law covers neither medical nor health insurance information.HRS 487N-1; HRS 487N-2(a), (f), (g) | Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.RCW 19.255.005(2)(a)(i)(G); RCW 19.255.005(2)(a)(i)(H) |
| AI in careAre there rules for AI used in your care?differs | No rulesNo. A law is in force, but it has none of the three rules.Act 248, SLH 2026 (SB3001 SD2 HD3 CD1), new section in HRS chapter 481B | 1 of 3 rulesOne of the three rules is in force. A licensed clinician decides, not AI alone.Another law is signed and takes effect January 1, 2027.RCW 48.43.830(3) (Laws of 2026 ch. 157 sec. 2); RCW 48.43.830 (Laws of 2026 ch. 157 sec. 3) |
Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.
Compare other states
All 50 states and Washington, DC, question by question
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research tool, not legal advice. Text CC BY 4.0.