E2SHB 2637
In CommitteeHouse
PRA/personal information
Safeguarding personal information entrusted to agencies that is of no legitimate concern to the public.
This status may be delayed. See Action History below for the latest updates.
How does a bill become law?
- Introduced: The bill is filed and assigned a number.
- Committee: A subject-matter committee holds hearings, takes public testimony, and decides whether to advance the bill.
- Floor Vote: The full chamber (House or Senate) debates and votes on the bill.
- Opposite Chamber: The bill repeats the committee and floor vote process in the other chamber.
- Governor: The Governor reviews the bill and decides whether to sign or veto it.
- Signed: The bill has been signed into law.
AI Analysis
This bill strengthens privacy protections for personal information shared with state agencies by making it exempt from public disclosure under the Public Records Act. It specifically bars use of such information for immigration enforcement and ensures residents can access state services without fear that their data will be used against them. The law applies to data like addresses, government IDs, and location details, and only the individual involved can allow disclosure of their own information.
- Exempts from public disclosure (under the Public Records Act) personal information that can identify individuals—such as age, address, place of birth, government ID numbers, and geolocation data—when submitted to state agencies for services.
- Expands existing exemptions to include personal information about children in early learning, child care, and youth programs, as well as their family members or guardians under certain conditions.
- Clarifies that personal information shared to access state services (e.g., health, education, social services) is not of legitimate public concern and cannot be used for immigration enforcement.
- Allows only the individual whose information is at issue to waive the privacy exemption—state agencies cannot disclose such information without consent.
- Includes protections for sensitive data related to driver’s licenses, identicards, vehicle registrations, and vessel registrations—including records that could reveal undercover work or immigration status.
Who is affected
- Residents accessing state services (including immigrants, regardless of status) — Individuals who provide personal information to access state services (e.g., education, health care, child care, social services) are protected from having that information used in immigration enforcement or disclosed publicly, reducing fear of seeking essential services.
- Public employees and officials — Employees, appointees, and elected officials gain stronger privacy protections for certain personal information in government files, preventing unwarranted public exposure.
- Students and families (especially minors) — Students, children in early learning or child care, and their families or guardians benefit from stronger privacy safeguards for school, child care, and youth program records.
- Drivers and vehicle/vessel registrants — People applying for or holding driver’s licenses, identicards, or vehicle registrations gain protections for sensitive data that could reveal immigration status or undercover work, including those in protective programs.
- Individuals submitting sensitive financial or personal data — Taxpayers, lottery players, gamblers in self-exclusion programs, and others submitting sensitive financial or personal data gain clearer protections against disclosure.
Pro/Con Analysis
Stronger case for benefits
Potential Benefits (5)
The bill significantly reduces the risk that immigrants—regardless of status—will be deterred from accessing essential services (healthcare, education, child care) due to fear that their information will be shared with federal immigration authorities. This directly supports equitable access and reduces state-complicity in federal immigration enforcement.
Rights & LibertiesPeopleRef: Sec. 2(14)(a)-(b) and Sec. 1 (findings)Families with young children—especially low-income, immigrant, or transient households—gain stronger protections against unwelcome public exposure, reducing stigma and enabling safer engagement with early learning and support programs without fear of immigration consequences or social surveillance.
EducationPeopleRef: Sec. 2(2)(a)-(b): exemptions for children, families, and substitute caregivers in early learning/child care/youth programsIndividuals in protective programs (e.g., victims of trafficking, domestic violence, or witnesses in sensitive investigations) gain concrete safeguards against identification through public records, enhancing their physical safety and ability to access state services without fear of retaliation.
Public SafetyPeopleRef: Sec. 2(7)(c), (d): exemptions for driver’s licenses, identicards, and vessel registrations that could reveal undercover work or immigration statusPeople with gambling disorders gain stronger privacy for sensitive health-related data, reducing barriers to entering voluntary support programs and protecting them from discrimination or stigma if their participation becomes public.
HealthcarePeopleRef: Sec. 2(11): exemptions for voluntarily submitted self-exclusion program data (gambling disorder)By ensuring only individuals—not agencies—can authorize disclosure, the bill prevents bureaucratic overreach and protects vulnerable populations (e.g., low-income, non-English speakers, undocumented individuals) from being disproportionately subjected to data-sharing practices that could deny or disrupt care.
HealthcarePeopleRef: Sec. 2(14)(a)-(b): individual-only waiver authority for personal data submitted to access services
Potential Concerns (5)
The bill’s broad exemption for personal data—including geolocation, government ID numbers, and consumer utility data—could hinder investigative journalism, academic research, and public oversight of government operations by limiting access to information that may be in the public interest, even when no individual harm is imminent.
Rights & LibertiesRef: Sec. 2(14)(a)-(b)By restricting agencies from independently determining when disclosure serves a compelling public interest (e.g., in cases of systemic fraud, public health threats, or corruption), the bill may impede legitimate government functions that require data sharing across agencies or with oversight bodies, even with anonymization.
Local GovernmentRef: Sec. 2(14)(b): 'only the individual who is the subject of the information may waive the exemption'Exempting consumer utility data from public records could delay or prevent law enforcement or emergency response agencies from accessing time-sensitive information (e.g., in missing persons cases, domestic violence emergencies, or disaster response), especially where utility data helps triangulate location or behavior.
Public SafetyRef: Sec. 2(14)(a)(vi): 'consumer utility data, including from phone and internet services'Overly broad definitions—such as including application numbers—may complicate data aggregation for program evaluation, performance measurement, or fraud detection, potentially reducing transparency around how state services are delivered and whether they are equitable.
Local GovernmentRef: Sec. 2(14)(a)(v): 'Government-issued identifier, including… application number'In cases where an individual is incapacitated, deceased, or otherwise unable to consent, the ban on agency-initiated waivers could block disclosure of critical information to family members, coroners, or public health officials—even when disclosure would serve clear public health or safety interests.
Public SafetyRef: Sec. 2(14)(b): 'only the individual who is the subject of the information may waive the exemption'
Who Is Most Affected
Undocumented and immigrant residents gain the strongest protections: they can access health, education, and social services without fear that their information will be shared with ICE or CBP. This directly increases their ability to participate in civic and economic life. However, those seeking public records for accountability (e.g., journalists, researchers) may face new barriers to oversight.
Families with young children—especially those in poverty, multilingual, or non-citizen households—benefit from reduced fear of state surveillance, improving engagement with early learning and child care. However, agencies may face operational challenges in coordinating care across programs when data cannot be shared internally without consent.
Victims of crime, domestic violence, or trafficking gain concrete protections against identification through public records, enhancing their safety and ability to access driver’s licenses or other services. However, law enforcement may occasionally face delays in accessing time-sensitive data during emergencies.
State agencies gain clearer legal authority to resist politically motivated or overly broad public records requests that could expose vulnerable individuals. However, this may increase administrative burden in evaluating whether a request falls under the new exemptions, and reduce transparency around program performance.
Journalists, researchers, and watchdog organizations may find it harder to investigate government misconduct, program inefficiencies, or systemic inequities due to reduced access to administrative data. This could weaken democratic accountability, especially in areas like child welfare or education equity.