WA My Health My Data Policy
Last Updated March 29, 2024
⤶ Back to Privacy Center
MetLife, Inc. and its U.S. affiliates (“MetLife” or “we”) strongly believe in the responsible use of information we collect about individuals. This Washington My Health My Data Act Policy (“Policy”) provides information regarding how MetLife and its affiliates and subsidiaries (collectively, “MetLife”, “we," “us,” “our,” or “Company”) process consumer health data subject to Washington’s My Health My Data Act (“WMHMDA”).
This Policy applies, subject to several exceptions, to personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status within the meaning of the WMHMDA. It applies only if you are:
- A resident of Washington; or
- An individual about whom information is collected in Washington.
We refer in this Policy to this data as “Washington consumer health data.”
Note that this Policy does not apply to personal information that is not subject to the WMHMDA, including to information that is specifically exempted from the WMHMDA, which includes, among other things, information collected, processed, disclosed, shared, or sold pursuant to the Gramm-Leach-Bliley Act (“GLBA”) and implementing regulations, certain insurance laws, protected health information subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations.
Looking for more details?
MetLife collects Washington consumer health data in connection with our services and products and the type of Washington consumer health data depends on the specific service or product offering that you use or receive and your interaction with us.
We may have collected the following categories of Washington consumer health data directly from you or about you in the last twelve (12) months. We do not necessarily collect all examples of Washington consumer health data listed in a particular category, nor do we collect all categories of Washington consumer health data for all consumers.
| Category | Examples |
|---|---|
A. Information about your health-related conditions |
Symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, use or purchase of medications, or other social, psychological, behavioral, and medical interventions); |
B. Measurements of bodily functions |
Vital signs, symptoms, or health characteristics, steps and other physical activity data (e.g., swimming, biking, burned calories, heart rate), activity and fitness time data, sleep data, nutrition data, mindfulness data, blood pressure, pulse and heart rate data, weight tracking data (e.g., body fat percentage, weight, height, body mass index, and other body mass information), blood glucose data, blood oxygen levels data, and body temperature data; |
C. Biometric data |
Fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait or other physical patterns and other imagery from which an identifier template can be extracted;Fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait or other physical patterns and other imagery from which an identifier template can be extracted; |
D. Information regarding gender-affirming care; |
Social, psychological, behavioral, cosmetic, medical, or surgical interventions, treatments for gender dysphoria, gender-affirming hormone therapy, and gender-affirming surgical procedures or information that could reasonably indicate your attempt to seek or obtain gender-affirming care; |
E. Information on reproductive or sexual health |
Social, psychological, behavioral, and medical interventions; health-related surgeries or procedures; bodily functions, vital signs, symptoms; diagnoses or diagnostic testing, treatment, use or purchase of medications; medical or nonmedical services related to and provided in conjunction with an abortion; or information that could reasonably indicate your attempt to seek or obtain reproductive or sexual health services; |
F. Genetic Data |
Raw sequence data that result from the sequencing of DNA; genotypic and phenotypic information that results from analyzing the raw sequence data; self-reported health data that is analyzed in connection with consumer's raw sequence data; |
G. Precise Geolocation data |
Information that could reasonably indicate your attempt to acquire or receive health services or supplies; |
H. Information that could identify your attempt to seek health care services or information |
e.g., We may collect your search queries on our websites and mobile apps, which may include queries concerning health-related topics; |
I. Other information that may be used to infer or derive data related to the above or other health information. |
|
Washington consumer health data does not include data related to the shopping habits or interests of a consumer, where that information is not used to identify the specific past, present or future health status of a consumer. For example, if you search for or shop for health-related items on one of our sites or read an article about a health-related condition or service, we do not consider associated data consumer health data where it is not used to infer or identify your specific past, present or future health status.
Sources of Washington Consumer Health Data
We may have collected Washington consumer health data about you from the following categories of sources:
- Directly from you;
- Automatically as you interact with our websites and mobile applications; and/or
- From other third-party or public sources.
We may collect your Washington consumer health data as necessary for the following business purposes:
- Essential business operations that support the provision of our services and products;
- Provide and maintain our services;
- Authenticate your identity;
- Comply with legal obligations and respond to legal processes and requests;
- Communicate with you;
- Troubleshoot and improve our services; and/or
- Personalize your experiences;
We may collect and use Washington consumer health data for other purposes for which we obtain your consent as required by the WMHMDA. This may include the following:
- Marketing purposes;
- Surveys;
- The purposes described in the consent; and
- Any other lawful purpose for which we obtain your consent
We may also collect and use Washington consumer health data to protect the Company, our users, and the public, such as to:
- Prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any activity that is illegal under Washington state law or federal law;
- Preserve the integrity or security of systems; and
- Investigate, report, or prosecute those responsible for any such action that is illegal under Washington state law or federal law.
We may deidentify or anonymize Washington consumer health data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law.
We may share or disclose each of the categories of Washington consumer health data described in this Policy as necessary to provide you with a product or service that you request, with your consent, or for certain security-related purposes, such as:
- With our subsidiaries and affiliates;
- With service providers; and
- To facilitate a business transfer.
- MetLife Companies and Affiliates; and
- MetLife Consumer Services
- Service providers;
- Other non-insurance businesses, including self funded disability, for WA residents;
- Third parties, as required or expressly permitted by law, such as government agencies and law enforcement;
- Other third parties as necessary to provide the services or products requested;
- Financial institutions and payment processors; and/or
- Other users and individuals at your directions;
We will not sell Washington consumer health data unless we have a separate written authorization from you to do so.
Under the WMHMDA, you may have certain rights, subject to exceptions, regarding your Washington consumer health data, as described below:
- Right to Know: You have the right to confirm whether the Washington consumer health data we have collected, shared, or sold, including a list of third parties to who we have shared that Washington consumer health data, about you during the past twelve (12) months.
- Right to Access: You have the right to access the Washington consumer health data collected, shared, or sold by us and relevant third parties.
- Right to Withdraw Consent: You have the right to withdraw consent for the collection and sharing of Washington consumer health data by us.
- Right to Delete: You have the right to request that we, and all third parties with whom we have shared the Washington consumer health data, delete certain Washington consumer health data we have collected about you.
- Non-Discrimination Right: You have the right to not face discrimination for exercising your rights under WMHMDA.
- To Submit a Request visit https://www.metlife.com/privacy-request or call 1-(888) 282-5758, Monday through Friday, 9:00 a.m. to 9:00 p.m. eastern time, excluding holidays.
To process your request and to help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Washington consumer health data or complying with your request. We may require you to provide additional Washington consumer health data to us. If you are making a request on behalf of someone else, we will need to verify that you have the authority to do so.
If you have any questions regarding these rights or would like to appeal a response that you received from us, you can call us at 1-(888) 282-5758. We are available Monday through Friday from 9 a.m. to 9 p.m., eastern time, excluding holidays. You can also email us at MetPrivacy@metlife.com.
MetLife does not discriminate against any individual who exercises their legal rights, such as denying you products and services, charging you different rates or prices, or suggesting or providing a different level of service to you.
If an authorized agent submits a request to know, a request to access, a request to correct, or a request to delete on your behalf, we may require that you provide the authorized agent with written permission to do so. To designate an authorized agent, please visit https://www.metlife.com/privacy-request or call 1-(888) 282-5758.
MetLife's Global Record Retention Schedule establishes the retention periods for our records consistent with MetLife business needs and global legal and regulatory requirements. Our Information Lifecycle Management Program Office conducts an annual review of the Record Retention Schedule to ensure the Schedule continues to align with global business needs and legal and regulatory requirements. MetLife, consequently, will retain Washington consumer health data only for as long as is necessary for the purpose set out in our policies, for as long as an account or relationship with MetLife is active, as needed to provide services to our customers, or to comply with our Global Record Retention Schedule.
We may change this Policy occasionally and will post the revised Policy on this site. When we do, we will let you know by posting the revised Policy with a new “Last Updated” date. Any changes to this Policy will become effective when posted unless indicated otherwise.We may change this Policy occasionally and will post the revised Policy on this site. When we do, we will let you know by posting the revised Policy with a new “Last Updated” date. Any changes to this Policy will become effective when posted unless indicated otherwise.
If you have questions about our privacy policies and practices or would like to receive this Policy in an alternative format, call us at 1-(877) 638-7684 or visit https://www.metlife.com/about-us/privacy-policy/.