SB 6164
In CommitteeSenate
WaTech/PRA exemption
Concerning individual privacy by Washington technology solutions through an exemption from public inspection and copying.
This status may be delayed. See Action History below for the latest updates.
How does a bill become law?
- Introduced: The bill is filed and assigned a number.
- Committee: A subject-matter committee holds hearings, takes public testimony, and decides whether to advance the bill.
- Floor Vote: The full chamber (House or Senate) debates and votes on the bill.
- Opposite Chamber: The bill repeats the committee and floor vote process in the other chamber.
- Governor: The Governor reviews the bill and decides whether to sign or veto it.
- Signed: The bill has been signed into law.
AI Analysis
This bill creates a legal exemption from public records disclosure for information submitted to Washington Technology Solutions (WaTech) for information technology services, especially digital services. It aims to protect individual privacy while supporting WaTech’s mission to provide secure, efficient government IT services. The law clarifies that data used to operate digital platforms—like online benefit applications or service portals—cannot be made public under the Public Records Act.
- Creates a new exemption under the Public Records Act (chapter 42.56 RCW) for information submitted to Washington Technology Solutions (WaTech) for IT services, especially related to digital experience platforms.
- Amends RCW 43.105.365 to explicitly state that information submitted to WaTech for providing IT services—including digital experience platform services—is exempt from public disclosure.
- Amends RCW 43.105.020 to formally define 'Agency' as Washington Technology Solutions and update other definitions to reflect its role.
- Reenacts and amends RCW 42.56.230 to add a new exemption (subsection 14) for personal and financial information submitted to WaTech, aligning it with other existing privacy protections in the law.
- Reinforces existing requirements for agencies to collect personal data with consent, ensure accuracy, and review data practices every five years.
Who is affected
- State and local government agencies — State agencies and local governments that use WaTech services will have certain information they submit to WaTech protected from public disclosure, helping protect sensitive data used in digital services.
- Washington residents using government digital services — Individuals who interact with government digital services (e.g., applying for benefits, using online portals) benefit from stronger privacy protections because personal data submitted to WaTech is shielded from public records requests.
- Washington Technology Solutions (WaTech) — WaTech itself gains legal clarity and protection for the data it manages, reinforcing its role as a trusted IT partner for the state.
- Public safety and law enforcement agencies — Law enforcement and public safety agencies may benefit indirectly from stronger data protections, as sensitive operational or confidential information submitted to WaTech is not exposed publicly.
Pro/Con Analysis
Stronger case for benefits
Potential Benefits (3)
The bill explicitly protects personal and financial information submitted to WaTech for digital service operation—such as benefit applications, identity verification, or eligibility data—from public disclosure, reducing the risk of data exposure through FOIA-style requests and aligning with existing privacy safeguards for sensitive government data.
privacyPeopleRef: Sec. 2, RCW 43.105.020(5); Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)By exempting information used to operate digital platforms—including emergency notification or crisis response systems—from public disclosure, the bill helps protect operational security and prevents adversaries or bad actors from reverse-engineering or exploiting system vulnerabilities through public records requests.
Public SafetyPeopleRef: Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)Local governments using WaTech services gain legal clarity that data they submit for digital service operation (e.g., housing voucher applications, food benefit portals) will not be subject to public records requests, reducing administrative burden and legal exposure when sharing data with WaTech.
Local GovernmentPeopleRef: Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)
Potential Concerns (3)
The exemption applies broadly to *any* information submitted to WaTech for IT services—including digital experience platforms—without limiting the scope to sensitive or personally identifiable data, potentially allowing state and local agencies to shield operational, financial, or performance data under the guise of IT service confidentiality. This could hinder government accountability and oversight by obscuring how digital services are designed, managed, and funded.
Local GovernmentIndustryRef: Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)While the bill includes exemptions for certain law enforcement-related data under subsection (7)(c) and (d), the new blanket exemption for WaTech-submitted information could be interpreted broadly to shield internal security incident reports, system vulnerability assessments, or emergency response data used in digital platforms—potentially limiting public and legislative oversight of critical infrastructure resilience.
Public SafetyIndustryRef: Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)The exemption may disproportionately benefit large technology vendors and contractors working with WaTech, as proprietary system designs, vendor-specific configurations, or performance metrics submitted to WaTech could become non-disclosable—reducing competitive transparency and potentially entrenching vendor lock-in without public scrutiny.
Business & EmploymentIndustryRef: Sec. 3, RCW 43.105.365(2); Sec. 4, RCW 42.56.230(14)
Who Is Most Affected
Residents using state benefit portals (e.g., SNAP, TANF, housing assistance) benefit from stronger privacy protection: their sensitive financial, demographic, and eligibility data submitted to WaTech will be shielded from public disclosure, reducing risks of identity misuse or data scraping.
State and local agencies gain legal certainty that data they submit to WaTech for platform operation (e.g., application forms, user analytics, system logs) will not be publicly disclosed, reducing liability and administrative overhead—but may also reduce transparency around service performance and equity outcomes.
WaTech itself benefits from legal reinforcement of its role as a trusted IT steward and protection of its operational data, but the broad exemption could limit public accountability for how it manages taxpayer data and allocates contracts.
Law enforcement and public safety agencies benefit from protection of operational data submitted to WaTech (e.g., emergency alert system configurations), but may face challenges if public records requests are needed to verify system integrity or response protocols.
Technology vendors and contractors working with WaTech benefit from reduced disclosure of proprietary system designs or performance metrics, but may face less competitive pressure if public oversight of vendor performance is curtailed.