Jumio Washington State Consumer Health Privacy Notice

Legal Rights & Agreement Rules · Context

Notice applies only to people protected by Washington’s MHMD

This notice describes how Jumio Corporation handles data that may qualify as Consumer Health Data under Washington’s My Health, My Data Act (MHMD), and it says the policy applies only to individuals who are protected by MHMD. It is dated “Last Updated: March 31, 2024”. The notice does not describe practices for people outside MHMD’s protection, and “may qualify” leaves open which data actually counts as Consumer Health Data.

Supporting quotations

Washington State Consumer Health Privacy Notice

Last Updated: March 31, 2024

This Consumer Health Privacy Notice (“Notice”) describes the privacy practices of Jumio Corporation

This policy applies only to individuals who are protected by MHMD.

Qualifications & exceptions

• The scope sentence limits the whole notice to individuals protected by MHMD.
• The data description is hedged: data “may qualify” as Consumer Health Data.

Not stated here

• Whether a particular person is protected by MHMD depends on that statute; the notice does not define who is protected.

Legal Rights & Agreement Rules · User right or choice

MHMD rights are exercised by email, with possible identity checks

A person covered by MHMD can exercise any rights described in MHMD, consistent with applicable law and Jumio’s role with respect to their Consumer Health Data, by emailing Jumio; Jumio may ask the person to verify identity before taking further action on a request. The notice gives no response deadline and no review route for a refusal.

Supporting quotations

If you are covered by MHMD, then you can exercise any of the rights described in MHMD consistent with applicable law and our role with respect to your Consumer Health Data by emailing

Please note that we may ask you to verify your identity before taking further action on your request.

Qualifications & exceptions

• The rights are those described in MHMD, exercised consistent with applicable law and Jumio’s role with respect to the data.

Not stated here

• The stored copy masks the email address behind a link-protection wrapper, so the address itself is not readable here.
• The notice does not say how quickly requests are answered or how a refusal can be reviewed.

Legal Rights & Agreement Rules · User right or choice

You can ask whether your health data is collected, shared or sold

Among the rights the notice lists is requesting confirmation of whether Jumio is collecting, sharing or selling the person’s Consumer Health Data. The sentence introducing the list says the rights “may include”, so the list is presented as examples rather than as the complete set of MHMD rights.

Supporting quotations

These rights may include:

Requesting confirmation of whether we are collecting, sharing, or selling your Consumer Health Data; and

Qualifications & exceptions

• “These rights may include” presents the list as non-exhaustive.

Not stated here

• The notice does not say what form the confirmation takes or how the answer distinguishes collecting, sharing and selling.

Legal Rights & Agreement Rules · User right or choice

Deletion can be requested, subject to exceptions the notice leaves open

Subject to certain exceptions prescribed by law, a covered person can request deletion of their Consumer Health Data. The notice does not identify those exceptions or state what data Jumio may keep after a deletion request.

Supporting quotations

Subject to certain exceptions prescribed by law, requesting deletion of your Consumer Health Data.

Qualifications & exceptions

• The deletion right is expressly subject to exceptions prescribed by law.

Not stated here

• The notice does not identify the exceptions prescribed by law or say what data Jumio may retain after a deletion request.

Legal Rights & Agreement Rules · Procedure

Jumio may revise the notice and posts updates on its site

Jumio says technology and the Internet are changing, that it is likely to make changes to the Services, and that it will therefore need to revise this Notice to reflect those changes. Revisions are posted on the MHMD notice page, which readers are advised to review periodically. If a change is material, the notice says users “will be notified appropriately” without naming a channel or timing.

Supporting quotations

Technology and the Internet are rapidly changing.

Jumio therefore is likely to make changes to the Services in the future and as a consequence will need to revise this Notice to reflect those changes.

so we recommend reviewing that page periodically.

If we make a material change to the Notice, you will be notified appropriately.

Qualifications & exceptions

• Notification of material changes is described only as “appropriately”; no channel, timing or acceptance step is stated.

Not stated here

• The notice does not define a material change, name the notification channel, or say whether continued use accepts a revision.

Legal Rights & Agreement Rules · Procedure

Questions about the notice go to Jumio by email or post

Questions or comments about this Notice can be sent by email to Jumio; the stored copy masks that address behind a link-protection wrapper. By post, the notice gives Jumio Corporation, ATTN: Privacy, 100 Mathilda Place, Suite 100, Sunnyvale, CA, 94086, U.S.A.

Supporting quotations

If you have any questions or comments regarding this Notice, please send an email to

If you prefer to contact us by mail, please write to Jumio Corporation, ATTN: Privacy, 100 Mathilda Place, Suite 100, Sunnyvale, CA, 94086, U.S.A.

Qualifications & exceptions

• Two contact routes are given: email and a postal address.

Not stated here

• The email address is obscured in the stored copy, so only the postal address is readable here.