SECURITY ADDENDUM (ENTERPRISE SAAS)

Washington Jurisdictional Version

KEY PROVISIONS

Data Breach Notification (RCW 19.255.010 et seq.)

• Notify within 30 days of discovery
• Notify WA Attorney General if >500 affected
• Written, electronic, or substitute notice permitted

Washington My Health My Data Act

• Consent required for collection/sharing of health data
• Private right of action
• Applies to non-HIPAA covered entities

Personal Information Definition

Name with: SSN, driver's license, financial account number, biometric data, health info, date of birth, mother's maiden name, unique ID.

Trade Secrets

Washington UTSA (RCW 19.108.010 et seq.)

E-Signatures

Washington UETA (RCW 19.360.010 et seq.)

Late Payment

12% per annum statutory rate; higher by contract with disclosure

Forum

Washington (exclusive). Jury waiver permitted.

EXECUTION

☐ Master Agreement referenced ☐ Washington-licensed counsel review