Governor signs Rep. Stephanie Barnard’s bill modernizing state privacy office and strengthening AI oversight into law

As state agencies increasingly turn to artificial intelligence and rapidly evolving digital tools to streamline their operations, the risk to Washingtonians’ sensitive personal information grows. Relying on outdated statutes to govern modern technology leaves the state’s digital defenses vulnerable.

That is why Rep. Stephanie Barnard, R-Pasco, introduced legislation to modernize the Office of Privacy and Data Protection and mandate strict AI oversight. Gov. Bob Ferguson agreed with that urgent need and signed House Bill 2606 into law today.

“We are entering a rapidly changing frontier with artificial intelligence, and our state’s digital defenses must be ready,” said Barnard. “Washingtonians should never have to choose between efficient government services and their personal privacy. By signing this bill into law, we are putting a vital, modern shield in place to ensure that as agencies adopt these powerful new technologies, they do not compromise the sensitive data of our citizens.”

The new law will overhaul the Office of Privacy and Data Protection, which serves as the central point of contact for state agencies on data privacy. Its duties now expand to include reviewing major government projects that use artificial intelligence and handle personal information.

House Bill 2606 also shifts the office’s reporting requirements away from obsolete metrics and toward tangible outcomes. The office must now establish performance measures to evaluate the improvement in privacy and data protection policies by state agencies following their participation in training. Additionally, the legislation requires tracking the number of public contacts and technical assistance requests, and completing privacy impact assessments.

“Protecting consumer data cannot just be a bureaucratic exercise or a box we check at the end of the year,” Barnard added. “We are throwing out obsolete metrics and demanding real accountability. This new law will force state agencies to prove they are actively safeguarding personal information and improving their privacy practices, ensuring the government remains completely transparent and accountable to the people of Washington.”

The bill passed the House by a vote of 89-6 and cleared the Senate unanimously, 49-0. The bill goes into effect on June 11, which is 90-days after the 2026 legislative session adjourns.

###

Washington State House Republican Communications
houserepublicans.wa.gov