Not sure where to start? Answer 3 questions and get a tailored compliance action plan.
What applies to me? →Washington State SB 5395 and SB 5886 (AI in Health Care and Right of Publicity)
Issued by
Washington State Legislature
Two Washington State statutes enacted in 2026 address distinct but related AI governance concerns. SB 5395 restricts how health care providers may use AI in prior authorization decisions, prohibiting AI from serving as the sole basis for denying patient care. SB 5886 extends right of publicity protections to AI-generated likenesses, imposing obligations on organizations that produce or deploy AI-generated representations of individuals.
Applies To
Overview
SB 5395 applies to health care providers and utilization review entities operating in Washington State that use AI tools within prior authorization workflows. The statute requires that clinical determinations involving denial of care incorporate human oversight and cannot rest on AI outputs alone. SB 5886 broadens Washington's existing right of publicity law to cover synthetic or AI-generated likenesses, affecting media, advertising, health care, and any enterprise that creates or deploys AI-generated representations of identifiable individuals. Both statutes carry enforceable obligations under Washington State law, with potential civil liability for non-compliance. The effective date of June 11, 2026 gives organizations limited time to audit existing AI deployments and update operational controls. Enterprises operating across multiple states should note that these statutes layer on top of federal requirements and any other applicable state-level AI rules.
Key Requirements
- •AI systems used in prior authorization must not serve as the sole basis for denying health care services to Washington State patients
- •Health care providers and utilization review entities must maintain documented human review processes for AI-assisted prior authorization denials
- •Organizations using AI to generate likenesses of individuals must comply with expanded right of publicity protections under SB 5886, effective June 11, 2026
- •Unauthorized use of AI-generated likenesses of identifiable individuals without consent may give rise to civil liability under SB 5886
- •Compliance with both statutes is required as of June 11, 2026, with no extended phase-in period specified
- •Violations of right of publicity provisions under SB 5886 may expose organizations to damages claims by affected individuals
What Your Organization Must Do
- →Audit all AI tools deployed within prior authorization workflows to identify any system that issues denial recommendations without human review at the point of decision
- →Update clinical and utilization review policies to require a qualified human reviewer to evaluate and document any AI-assisted prior authorization denial before it is communicated to the patient
- →Implement a consent and clearance process for any AI-generated likeness of identifiable individuals used in health care communications, marketing, or content production
- →Review vendor contracts for AI tools used in prior authorization to confirm that vendors support human-in-the-loop workflows and provide audit logs sufficient for regulatory scrutiny
- →Train clinical operations, legal, and compliance staff on the specific prohibitions in SB 5395 before the June 11, 2026 effective date
- →Engage outside counsel to obtain official legislative text for SB 5395 and SB 5886, confirm final enacted language, and identify any implementing regulations that may follow
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- Does Washington SB 5395 prohibit AI from being used in prior authorization decisions entirely?
- No, SB 5395 does not ban AI from prior authorization workflows. It prohibits AI from serving as the sole basis for denying care. A qualified human reviewer must evaluate and document any denial before it is communicated to the patient.
- Which organizations must comply with Washington SB 5886 right of publicity requirements for AI-generated likenesses?
- Any organization that creates or deploys AI-generated representations of identifiable individuals is subject to SB 5886, including media companies, advertisers, health care entities, and other enterprises. The statute is not limited to a single industry sector.
- What is the compliance deadline for Washington SB 5395 and SB 5886, and is there a phase-in period?
- Both statutes take effect on June 11, 2026, with no extended phase-in period specified. Organizations should treat this as a hard deadline and complete audits, policy updates, and staff training before that date.
- What civil liability exposure does SB 5886 create for unauthorized use of AI-generated likenesses in Washington State?
- Affected individuals may bring damages claims against organizations that use AI-generated likenesses without proper consent. The statute extends Washington's existing right of publicity protections, meaning civil liability attaches to unauthorized synthetic representations of identifiable people.
- How does Washington SB 5395 interact with federal prior authorization requirements for health plans?
- SB 5395 layers on top of existing federal requirements, including CMS prior authorization rules applicable to Medicare and Medicaid. Health care providers and utilization review entities operating in Washington must satisfy both state and federal obligations, and the more restrictive standard will govern in cases of conflict.
- What documentation must utilization review entities maintain to demonstrate SB 5395 compliance?
- The statute requires documented human review processes for any AI-assisted prior authorization denial. Compliance officers should ensure that audit logs capture the identity of the human reviewer, the clinical rationale, and confirmation that the denial was not based on AI output alone.