NRS Chapter 603A — SECURITY AND PRIVACY OF PERSONAL INFORMATION
62 sections, reproduced from the official Nevada Legislature site (retrieved ). Official chapter page →
- NRS 603A.010 — Definitions.
- NRS 603A.020 — “Breach of the security of the system data” defined.
- NRS 603A.030 — “Data collector” defined.
- NRS 603A.040 — “Personal information” defined.
- NRS 603A.100 — Applicability; waiver of provisions prohibited.
- NRS 603A.200 — Destruction of certain records.
- NRS 603A.210 — Security measures.
- NRS 603A.215 — Security measures for data collector that accepts payment card; use of encryption; liability for damages; applicability.
- NRS 603A.217 — Alternative methods of and technologies for encryption: Adoption of regulations.
- NRS 603A.220 — Disclosure of breach of security of system data; methods of disclosure; applicability.
- NRS 603A.260 — Violation constitutes deceptive trade practice.
- NRS 603A.270 — Civil action.
- NRS 603A.280 — Restitution.
- NRS 603A.290 — Injunction.
- NRS 603A.300 — Definitions.
- NRS 603A.310 — “Consumer” defined.
- NRS 603A.320 — “Covered information” defined.
- NRS 603A.323 — “Data broker” defined.
- NRS 603A.325 — “Designated request address” defined.
- NRS 603A.330 — “Operator” defined.
- NRS 603A.333 — “Sale” defined.
- NRS 603A.337 — “Verified request” defined.
- NRS 603A.338 — Applicability of provisions.
- NRS 603A.340 — Notice regarding covered information collected by operator: Operator required to make available to consumers; contents; exception.
- NRS 603A.345 — Submission of verified request to operator not to sell covered information collected by operator; response to verified request.
- NRS 603A.346 — Submission of verified request to data broker not to sell covered information purchased by data broker; response to verified request.
- NRS 603A.347 — Data broker authorized to remedy first failure to comply with requirements concerning verified request.
- NRS 603A.348 — Operator authorized to remedy first failure to comply with notice requirements.
- NRS 603A.349 — Operator authorized to remedy first failure to comply with requirements concerning verified request.
- NRS 603A.350 — Unlawful acts.
- NRS 603A.360 — Enforcement by Attorney General; civil penalty for violation or injunction; no private right of action against operator; provisions not exclusive.
- NRS 603A.400 — Definitions.
- NRS 603A.405 — Affiliate” defined.
- NRS 603A.410 — Authenticate” defined.
- NRS 603A.415 — Biometric data” defined.
- NRS 603A.420 — Collect” defined.
- NRS 603A.425 — Consumer” defined.
- NRS 603A.430 — Consumer health data” defined.
- NRS 603A.435 — Gender-affirming care” defined.
- NRS 603A.440 — Genetic data” defined.
- NRS 603A.445 — Health care services or products” defined.
- NRS 603A.450 — Precise geolocation information” defined.
- NRS 603A.455 — Process” defined.
- NRS 603A.460 — Processor” defined.
- NRS 603A.465 — Regulated entity” defined.
- NRS 603A.470 — Reproductive or sexual health care” defined.
- NRS 603A.475 — Sell” defined.
- NRS 603A.480 — Share” defined.
- NRS 603A.485 — Third party” defined.
- NRS 603A.490 — Applicability.
- NRS 603A.495 — Regulated entity required to develop and maintain policy concerning privacy of consumer health data; policy to be posted on Internet website maintained by regulated entity; prohibited acts.
- NRS 603A.500 — Collection and sharing of consumer health data by regulated entity prohibited; exceptions; required disclosures for request for consent to collect or share consumer health data.
- NRS 603A.505 — Actions required of regulated entity upon request of consumer; establishment of means of making request.
- NRS 603A.510 — Response by regulated entity to request by consumer; inability to authenticate request; fee; challenge to validity of fee charged.
- NRS 603A.515 — Deletion of consumer health data upon request by consumer; deletion by third party; delay of deletion of data on archived or backup system.
- NRS 603A.520 — Regulated entity to establish process for appeal of refusal to act on request by consumer; regulated entity required to inform consumer in writing after receipt of appeal.
- NRS 603A.525 — Regulated entity to limit authority of employees and processors to access consumer health data; regulated entity to establish, implement and maintain policies and practices for security of consumer health data.
- NRS 603A.530 — Limitations on authority to process consumer health data pursuant to contract; processor to assist regulated entity to comply with law; liability of processor for acts inconsistent with contractual provisions.
- NRS 603A.535 — Unauthorized sale or offering of consumer health data prohibited; provision of goods or services conditioned upon authorization of sale of consumer health data prohibited; required contents of authorization; revocation; expiration; invalidity; provision and retention of copies.
- NRS 603A.540 — Implementation of geofence near certain facilities, persons or entities that provide in-person health care services or products prohibited.
- NRS 603A.545 — Discrimination prohibited.
- NRS 603A.550 — Violation constitutes deceptive trade practice; no private right of action; other provisions of law unimpaired.