WASHINGTONMY HEALTH MY DATA ACT PRIVACY NOTICE
Last Modified March 13, 2026
OVERVIEW
RLI Insurance Company, and itssubsidiaries and affiliates (together, “RLI”) value your privacy. ThisWashington My Health My Data Act Privacy Notice (“MHMDA Notice”) explains howRLI collects, uses, and shares Consumer Health Data under the Washington MyHealth My Data Act (“MHMDA”).
WHO DOES THIS MHMDA NOTICE APPLY TO?
This MHMDA Notice applies to“Consumers”, meaning: 1) a natural person acting in an individual or householdcontext who is a Washington resident; or 2) a natural person acting in anindividual or household context whose consumer health data was collected inWashington.
WHAT IS CONSUMER HEALTH DATA?
Under the MHMDA, “Consumer HealthData” is any information that is or can reasonably be linked to a Consumer andthat identifies the Consumer’s past, present, or future physical or mentalhealth status.
Consumer Health Data may also beprotected by other laws such as the Gramm-Leach-Bliley Act (“GLBA”), the HealthInsurance Portability and Accountability Act (“HIPAA”), and the Fair CreditReporting Act (“FCRA”). The MHMDA does not apply to Consumer Health Data thatis protected by these and other privacy laws. To learn more about RLI’s privacypractices under these and other laws, visit https://www.rlicorp.com/rli-privacy-policy.
WHAT CONSUMER HEALTH DATA DOES RLI COLLECT?
RLI may collect Consumer HealthData in connection with claims related to RLI insurance products. RLI maycollect Consumer Health Data such as:
HOW DOES RLI USE CONSMER HEALTH DATA?
RLI may use Consumer Health Data to:
HOW DOES RLI SHARE CONSUMER HEALTH DATA?
RLI may disclose Consumer HealthData to its affiliates and subsidiaries, which are: RLI Corp., Mt. HawleyInsurance Company, Contractors Bonding and Insurance Company, RLI UnderwritingServices, Inc., Safe Fleet Insurance Services, Inc., and Data and Staff ServiceCo. RLI may also disclose Consumer Health Data to third party serviceproviders, or as otherwise required or permitted by law.
DOES RLI SELL CONSUMER HEALTH DATA?
RLI does not sell Consumer Health Data.
WHATRIGHTS DO CONSUMERS HAVE UNDER THE MHMDA?
Consumers covered by the MHMDA have the following privacyrights, subject to certain limitations. Information covered by other privacylaws such as GLBA, HIPAA, and FCRA is exempted from the following MHMDA privacyrights.
I. Right to Know
Under theMHMDA, you have the right to know what Consumer Health Data RLI has collectedfrom you, and whether RLI has shared or sold that Consumer Health Data tounaffiliated third parties or affiliates. To the extent RLI has shared or soldConsumer Health Data to unaffiliated third parties or affiliates, you have theright to receive contact information for these third parties or affiliates,such as an active email address or other means of contacting them online.
II. Right to Delete
Under the MHMDA,you have the right to request deletion of your Consumer Health Data that RLIhas collected and is maintaining. Please note that there may be instances inwhich RLI is required by other laws, such as GLBA, to retain your ConsumerHealth Data.
HOW CAN I EXERCISE MY RIGHTS?
You may submit a request underthe MHMDA by one of the following metho
Upon receipt, RLI willacknowledge your request, and may ask for additional information from you inorder to verify your identity and authenticate your request. RLI will respondto your request in writing within 45 days of receiving your request. Wherereasonably necessary, RLI may extend the response period by an additional 45days. If RLI refuses to take action on an MHMDA request, you may submit an appealby contacting us via the phone or email listed above. RLI will respond to anyappeal in writing within 45 days of receipt and will explain the reason(s) forits decision.
