Web Design in Spokane, WA: The Health Data Form Worksheet

Updated November 2026 · Written and maintained by the Progression Agency strategy team

Five fields sit on a typical clinic contact form, and one of them, the box asking what brings you in, can collect health data the moment someone types. Web design in Spokane, WA, for clinics, med spas, wellness studios and health retailers has to account for Washington’s My Health My Data Act. This page lets you classify every field and tag on your site, one row at a time, then shows what fixing it costs. It describes the law as written and does not replace your attorney. Progression is based in New York and designs for Spokane clients remotely, with on-site sessions on request.

Five fields on a contact form

Name, email, phone, preferred location, and a box that asks what brings you in. The first four are routine. The last invites a visitor to describe a symptom, a procedure or a diagnosis in their own words.

Most sites never classify that last box, and it travels: into an email inbox, a booking tool, a spreadsheet and sometimes an advertising pixel. This is an illustration, not any real clinic’s form.

Web design in Spokane, WA, in a health care town

Greater Spokane Inc’s economic development director wrote in November 2025 that Spokane’s largest industry is health care. It says health care and social assistance jobs in Spokane County grew 12 percent over five years to 50,418 total jobs, 36 percent above the national average for an area that size, and that about one in five people in Spokane work in health care.

That puts a lot of sites in one category: clinics, physical therapists, med spas, wellness studios, supplement shops and fitness businesses. A web design Spokane project for any of them touches the same questions. Spokane website designers who build forms and install tags for these businesses are building the pipes the state’s law cares about, and Spokane website design is the cheapest time to fix them.

The Attorney General’s FAQ says that, generally, all persons and businesses that conduct business in Washington or provide services or products to Washington, and that collect, process, share or sell consumer health data, are affected by the act. Whether your business is one of them is a question for your attorney.

What Washington’s act says, in the words that matter here

The act is chapter 19.373 of the Revised Code of Washington. Under RCW 19.373.010, a consumer is a natural person who is a Washington resident, or a natural person whose consumer health data is collected in Washington, acting only in an individual or household context.

Consumer health data is personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present or future physical or mental health status. The chapter’s list of what that includes is long, and the cards show the parts a website most often touches.

To collect, in the chapter’s words, is to buy, rent, access, retain, receive, acquire, infer, derive or otherwise process consumer health data in any manner. Consent is a clear affirmative act, and it may not be obtained by a consumer’s acceptance of a general or broad terms of use agreement, or by hovering over, muting, pausing or closing content. The effective dates, per the Attorney General: regulated entities that are not small businesses comply with sections 4 through 9 from March 31, 2024. Enforcement runs through the Consumer Protection Act, as RCW 19.373.090 provides, and the Attorney General says that includes private action. Ask counsel what applies to you.

Small business is a defined term with its own date

The chapter defines a small business as a regulated entity that collects, processes, sells or shares consumer health data of fewer than 100,000 consumers in a calendar year, or that derives less than 50 percent of gross revenue from that data and handles the data of fewer than 25,000 consumers. Small businesses comply with sections 4 through 9 from June 30, 2024. It is a defined term with a later date, not an exemption from the act.

The health information exclusion, and why to ask

RCW 19.373.100 says the chapter does not apply to certain information, including protected health information under the federal health privacy rule and other health care information as listed. Whether the data a marketing page collects falls inside that list is not something a web designer can decide. Ask counsel, and do not assume.

The field and tag worksheet

Copy this table and fill it in for your site, one row per field or tag. An item can be harmless alone and informative beside the page it sits on, and a form on a condition page tells more than a general one. The diagram shows the order of questions.

The box that asks what brings you in

Separate the reason from the routing. A menu of services lets the front desk send the message to the right person without inviting a diagnosis. If the business wants the free text, ask for less, or collect it after consent. The choice belongs to the business and its counsel.

• Replace an open box with a menu of services where routing is the goal.
• If free text stays, say what it is used for beside the box.
• Keep the text out of advertising and analytics tags.
• Decide who reads it, and how long it is kept, before the form goes live.

Tags on a page named after a condition

The address of a page can reveal a health interest by itself, and how a court would read that is a question for counsel. A tag that fires on a page about a named condition tells its vendor more than the same tag on a homepage. Our hospital website design page covers the separate federal privacy questions on hospital sites.

Reading your worksheet: keep, change or remove

Each row ends in one of three decisions. The cards say what each means in practice.

RCW 19.373.020 requires a consumer health data privacy policy that clearly and conspicuously discloses what is collected, why, from where and shared with whom, and says a regulated entity or small business must prominently publish a link to it on its homepage. A new category or purpose needs disclosure and affirmative consent before collection. The cards show the contents.

RCW 19.373.030 says consumer health data may be collected only with consent for a specified purpose, or to the extent necessary to provide a product or service the consumer requested. Sharing needs consent that is separate and distinct from the consent to collect, or the same necessity. Consent has to come before collection or sharing, which rules out a pre-ticked box.

What about a location ad around a clinic?

RCW 19.373.080 makes it unlawful for any person to implement a geofence around an entity that provides in-person health care services where the fence is used to identify or track consumers seeking care, collect consumer health data, or send notifications, messages or advertisements related to their health data or care. The chapter defines a geofence as a virtual boundary 2,000 feet or less from the perimeter of the location. A location ad is a question for counsel before it is a website question.

What does a consent request have to say?

RCW 19.373.030 says the request for consent must clearly and conspicuously disclose the categories of consumer health data collected or shared, the purpose of the collection or sharing including the specific ways it will be used, and the categories of entities it is shared with. A consent step is a design job as much as a legal one.

• Name the categories of data in plain words beside the request.
• State the purpose and the specific uses, not a general promise.
• Name the categories of companies that will receive it.
• Use an unticked box or a button that is a clear affirmative act.
• Keep sharing consent separate from consent to collect.

Which tags should wait for consent?

Any tag that sends information about a health-related page or form to an outside vendor belongs on the list for review. Counsel decides the line; the designer can make loading conditional.

• Advertising and conversion tags on condition and service pages.
• Session replay tools on pages with forms.
• Chat widgets that capture typed messages.
• Booking embeds that pass the chosen service to a vendor.
• Email signups placed on condition pages.

Do a name and an email count?

On their own they are contact details. Beside a page about a treatment, or on a form that asks about a symptom, the combination can tell a vendor more. That is the reason the worksheet looks at where each item sits and not only what it is.

Who should own the worksheet?

One named person at the business, with the designer and the attorney as reviewers. A sheet that belongs to everyone belongs to no one, and a sheet that is two years old does more harm than none.

• The owner at the business keeps the sheet and the date of its last review.
• The designer lists every field and tag and flags any change.
• The attorney reviews wording and decisions on coverage.
• The front desk reports any new tool someone asks to install.

Does a general contact form need the same care as a condition page form?

Both go on the worksheet. The difference is the page they sit on, and a form on a page about a named condition deserves a closer look at what it asks and who receives it.

• Compare the form’s questions with the chapter’s list.
• Check which tags load on the page around the form.
• Check where the submitted answers are stored and who can read them.

What the fixes cost

The work on the worksheet falls into four jobs, shown on the cards. Attorney time for the policy and consent wording is your own line, outside any web design quote.

Published bands for a clinic site

These bands run from the typical low to the published high for the kind of work each row describes.

Our list prices next to those bands

Our website design and development page publishes fixed-scope prices: a single landing page from $1,400, a brochure site of five to eight pages from $9,500, a business site of ten to sixteen pages from $18,000, and accessibility remediation from $4,000.

Spokane website design across the Idaho line

Spokane sits next to the Idaho border, and plenty of patients cross it. The chapter defines a consumer as a Washington resident, or a person whose consumer health data is collected in Washington. A practice in Coeur d’Alene or Post Falls whose patients live in Washington, or a Spokane practice that sees Idaho patients, should read that definition with counsel.

This page states no Idaho rule. Spokane Valley web design and Spokane website design for Idaho-side offices start from the same worksheet, and the answer to who is covered comes from your attorney.

Website design in Spokane, WA, for a two-state practice may need two sets of answers on the same form, and the worksheet is where they are written down.

Hosting and upkeep once the worksheet is done

Website hosting in Spokane or anywhere else does not change the worksheet, but upkeep does. Re-run it whenever someone adds a tag, a form, a chat tool or a booking embed. Name one person who owns the sheet.

• Add a row each time a new tag or form goes live.
• Re-check the homepage link to the policy after every redesign.
• Keep the date of the last review on the sheet.
• Ask counsel to review any new category of data before it is collected.

Monthly care plans, as published market bands, run from $100 to $2,500 a month. See healthcare website design and dental website design for the build side.

A Spokane website designer and the questions this sheet raises

Send each candidate the worksheet and read what comes back. The table gives one question per column and a weak answer for each.

If you searched for the best web design in Spokane, send each candidate this worksheet and read what comes back.

Some searches for website design Spokane WA turn up long lists; a firm that cannot fill in the worksheet with you has not looked at your site.

Related services and guides

Pages that sit beside this worksheet:

• Hospital website design
• Healthcare website design
• Dental website design
• Website design and development
• Web design by city

Frequently asked questions