The policy states that health information provided by users subject to the Washington My Health My Data Act and Nevada SB 370 is processed by Google with user consent, which users may withdraw, or as otherwise permitted by those statutes.
This analysis describes what Google's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a consent-based processing framework for health data for users covered by the Washington My Health My Data Act and Nevada SB 370, creating a specific withdrawal right that operates separately from general privacy controls. The Washington My Health My Data Act applies broadly to health data and carries a private right of action, creating heightened legal exposure.
Interpretive note: The policy does not specify the exact mechanism for withdrawing consent for health data processing under these statutes, and the adequacy of Google's general privacy controls as a consent withdrawal mechanism under the Washington My Health My Data Act's specific requirements is not fully determinable from the policy text alone.
Under this clause, users in Washington state and Nevada who provide health information through Google services (including Fitbit, Pixel devices, Google Health Studies app, and similar services) may withdraw consent for Google's processing of that health data. The policy does not specify the exact mechanism for consent withdrawal in this context, directing users to general privacy controls.
Cross-platform context
See how other platforms handle Health Data Processing Under Washington My Health My Data Act and Nevada SB 370 and similar clauses.
Compare across platforms →"The Washington My Health My Data Act and Nevada Senate Bill 370 provide specific rights in addition to those rights above, that apply to health information. When you provide health information subject to these laws, Google processes it with your consent, which you may withdraw, or as otherwise permitted by these laws.Excerpt from Google's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a consent-based processing framework for health data for users covered by the Washington My Health My Data Act and Nevada SB 370, creating a specific withdrawal right that operates separately from general privacy controls. The Washington My Health My Data Act applies broadly to health data and carries a private right of action, creating heightened legal exposure.
Under this clause, users in Washington state and Nevada who provide health information through Google services (including Fitbit, Pixel devices, Google Health Studies app, and similar services) may withdraw consent for Google's processing of that health data. The policy does not specify the exact mechanism for consent withdrawal in this context, directing users to general privacy controls.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google.