Enhancing data stewardship and privacy protections for vehicle and driver data.
Summary
Requires the Department of Licensing to enter into a contract with an entity authorized to receive personal or identity information that must include limitations for the use of this information, requirements that the data recipient allow regular use audits and undergo regular data security audits, and provisions governing redisclosure of this information.
Establishes a civil penalty for the unauthorized disclosure or use of personal or identity information of up to $20,000 per incident.
Expands government access to personal and identity information for any request related to the carrying out of governmental functions, except for requests that target Washington residents solely on the basis of race, religion, immigration, or citizenship status, or national or ethnic origin.
Expands access to driving abstract information to transportation network companies, as well as to state agencies and scientific research organizations conducting research.
From the Substitute House Bill Report (SSB 5152), written by the Legislature's nonpartisan staff. Read the full report ↗
AN ACT Relating to enhancing data stewardship and privacy protections for vehicle and driver data by clarifying the allowable uses of personal or identity information, prescribing penalties for data misuse, and codifying existing data contract practices;