Assembly Bill 320 for An Act relating to Internet privacy was introduced, on 16 March 2023, to the Nevada Assembly, where it was read for the first time, and subsequently referred to the Committee on Commerce and Labor, on the same date. In particular, the bill seeks to establish requirements for certain businesses that provide an online service, product, or feature that is likely to be accessed by children, whereby a child means a consumer who is under 18 years of age.

More specifically, the bill requires covered entities to, among other things, complete a Data Protection Impact Assessment ('DPIA') on and after 1 January 2025, before making new online services, products, or features available to the public, if the same are likely to be accessed by children. Moreover, the bill would prohibit entities from engaging in various activities in relation to the collection, retention, sharing, sale, or use of personal information of a child and from employing dark patterns to encourage a child to, among other actions, forego privacy protections.

In addition, the bill stipulates that an entity that violates the bill shall be liable in a civil action brought by the Nevada Attorney General for a civil penalty of not more than $2,500 or $7,500 for each child affected by each negligent or intentional violation, respectively.

You can read the bill here and track its progress here.