Quick Facts
Breach Based on Harm Threshold: No
Deadline for Consumer Notice: Most expedient time possible and without unreasonable delay
Government Notification Required: No
Scope of this Summary:
Notification requirements applicable tbusinesses that own, license, or maintain covered info. Some types of businesses may be exempt from some or all of these requirements, and non-commercial entities may be subject tdifferent requirements.
Risk of Harm Threshold
The notification obligation is not subject ta risk assessment.
Breach Defined
Unauthorized acquisition that materially compromises the security, confidentiality, or integrity of the covered info, excluding certain good-faith acquisitions by employees or agents.
Encryption Safe Harbor
Statute does not apply tinformation that is encrypted.
Form of Covered Info
Electronic Only
Covered Information
An individual's first name or first initial and last name in combination with any one or more of the following data elements:
- Social security number.
- Driver's license number, driver authorization card number or identification card number.
- Account number, credit card number or debit card number, in combination with any required security code, access code or password that would permit access tthe person's financial account.
- A medical identification number or a health insurance identification number.
- A username, unique identifier or electronic mail address in combination with a password, access code or security question and answer that would permit access tan online account.
Consumer Notice Timing
Must be made in the most expedient time possible and without unreasonable delay, consistent with any measures tdetermine the scope of the breach and restore the reasonable integrity of the system.
Consumer Notice Method
By written notice or electronic notice if consistent with E-SIGN. Substitute notice is available if certain criteria are satisfied.
Consumer Notice Content
The Nevada statute does not include any content requirements.
Delayed Notice
Notification may be delayed if law enforcement determines notice may impede a criminal investigation.
Government Notice
The Nevada statute does not require notification of any government or regulatory agency.
Consumer Reporting Agency Notice
If more than 1,000 residents are notified, must, without unreasonable delay, notify all nationwide Consumer Reporting Agencies of timing and content of the consumer notice.
Exceptions for Other Laws
The statute includes exceptions for entities subject tand in compliance with the Gramm-Leach-Bliley Act (GLBA).
Third-Party Notice
If you maintain covered infon behalf of another entity, you must notify it immediately following discovery of a breach.
Private Right of Action
The Nevada statute does not provide a private right of action for violations.
Potential Penalties
Violations may result in civil penalties. Willful violation can result in criminal penalties.
This summary is for informational purposes only. It provides general information and not legal advice or opinions regarding specific facts. Additional requirements or conditions may apply to any or all provisions referenced herein. For more information about the state data breach notification laws or other data security matters, please seek the advice of counsel.
Last revised on June 15, 2023