RCW 59.18.755: Smart access systems—Privacy policy. (Effective January 1, 2027.)

(1) The landlord of a smart access building shall make available to tenants any written privacy policy of the entity that developed the smart access system utilized in such building, or any written privacy policy of the entity that currently operates the smart access system utilized in the building.

(2) The landlord of a smart access building, or an agent thereof, must provide to tenants, either upon the initial signing of a lease agreement or within five days of the installation of the smart access system, a written policy in plain language that describes, at a minimum, the following information if it is not included in the privacy policy described in subsection (1) of this section:

(a) The data elements to be collected by the smart access system, including the extent to which data elements are collected that contain information of, or relating to, the guests of a tenant;

(b) The protocols and safeguards the landlord will provide for protecting such data elements;

(c) The retention schedule of such data;

(d) The protocols the landlord will follow to address any suspected or actual unauthorized access to or disclosure of such data elements, including notification of users;

(e) Guidelines for permanently destroying or anonymizing such data or removing such data from the smart access system; and

(f) The process used to add a tenant who has provided written consent on a temporary basis to the smart access system.

(3) If the information required to be provided under subsection (2) of this section is provided by the smart access system developer and the landlord does not retain or sell any information from the smart access system, a landlord is compliant with the requirements of this section by providing the privacy policy of the developer or by providing a link to the developer's website which contains the privacy policy of the smart access system.