Support Centre

Nevada

Summary

Law: Chapter 603A of the Nevada Revised Statutes ('NRS') on Security and Privacy of Personal Information

Regulator: The Nevada Attorney General

Summary: In 2017, Senate Bill 538 for an Act Relating to Internet Privacy entered into force before being further amended in 2019, by Senate Bill 220 for an Act Relating to Internet Privacy, the provisions of which took effect on October 1, 2019. These bills amended Chapter 603A of the Nevada Revised Statutes (NRS). The provisions of Chapter 603A of the NRS prohibit an operator of an internet website or online service that collects certain information from consumers from making any sale of such information unless directed by consumers. In addition, operators must establish a designated request address through which a consumer may submit such a request.

Furthermore, notification of data breaches to consumers is required under Section 603A.220 of the NRS. Operators in Nevada must also include certain disclosures in their privacy policies regarding the information they collect. Finally, businesses must take measures to ensure the destruction of information when it is no longer needed.

Senate Bill No. 370 for An Act relating to data privacy was approved, on June 15, 2023, by the Nevada Governor, thereby becoming law. The Act will become effective on March 31, 2024.

You can follow legislative developments in the US through the USA State Law Tracker.

Insights

In this Insight Article, Jennie Cunningham, from Kilpatrick Townsend & Stockton, explores the evolving landscape of health data privacy regulations in the US, with a focus on Washington's My Health My Data Act (the Act) and Nevada's Senate Bill No. 370 for An Act relating to data privacy (SB 370), both of which expand data protection beyond federal law standards.

In this Insight article, Bart Huffman, Wendell Bartnick, and Haylie Treas, from Holland & Knight, address opt-out rights and related requirements under certain US state privacy laws that are currently in effect and/or will take effect in 2023.

Part two analyses the processing of opt-out requests, consent and opt-in requests, other compliance considerations, and the interplay with other major federal privacy laws, whereas part one explores opt-out rights, disclosures related to these opt-out rights, and opt-out mechanisms.

In this Insight article, Bart Huffman, Wendell Bartnick, and Haylie Treas, from Holland & Knight, address opt-out rights and related requirements under certain US state privacy laws that are currently in effect and/or will take effect in 2023.

Part one explores opt-out rights, disclosures related to these opt-out rights, and opt-out mechanisms, whereas part two analyses the processing of opt-out requests, consent and opt-in requests, other compliance considerations, and the interplay with other major federal privacy laws.

Just as the Gramm-Leach-Bliley Act of 1999 ('GLBA') permits US states to extend greater protections than afforded by the same, states can also choose to exempt GLBA-regulated entities from compliance with state privacy statutes. In this Insight article, David Zetoony and Jena Valdetero, from Greenberg Traurig LLP, discuss how the California Consumer Privacy Act of 2018 ('CCPA') and the California Privacy Rights Act of 2020 ('CPRA') apply to financial institutions, whilst also drawing comparisons to other state privacy statutes' exemptions for financial institutions.

On 1 October 2021, Nevada's Senate Bill ('SB') 260 for an Act relating to internet privacy and other purposes ('the Act') took effect, after being approved by the Nevada State Governor on 2 June 2021. The Act was a big step for the regulation of consumer information in Nevada, and applies to data brokers, prohibiting them from certain actions with respect to the personal information of consumers. This article analyses the Act, its requirements for data brokers, and penalties for non-compliance with its provisions.