πŸ‡ΊπŸ‡ΈNevada Consumer Health Data Privacy Law

Skin

← Back to laws in United States

Nevada Consumer Health Data Privacy Law

Nevada Consumer Health Data Privacy Law

This specialist state privacy law applies to a defined data type, business model or processing activity. It should be layered over any applicable comprehensive state and federal laws.

Current official version

Effective status: March 31, 2024

Citation: Nev. Rev. Stat. Chapter 603A, sections 603A.400 et seq.

Source basis: Current Nevada Revised Statutes Chapter 603A published by the Nevada Legislature.

Scope

The Nevada law applies to regulated entities that conduct business in Nevada or target Nevada consumers and process consumer health data. The definition includes reproductive and sexual health, gender-affirming care, health-related location, biometric and genetic data, and data inferred by algorithms or machine learning.

Operational obligations

Publish a consumer health data policy; obtain consent for collection and sharing beyond a requested product or service; obtain a separate written authorization for sale; provide access and deletion; contract with processors; maintain security; and prohibit specified geofencing around health-care facilities.

State-specific point

Health data and regulated-entity coverage must be assessed separately from Nevada website-operator privacy provisions elsewhere in Chapter 603A. Inferred and proxy health data are expressly included.

Enforcement

The Nevada Attorney General enforces the consumer health provisions. The statute states the remedies and does not create the same private-action model as Washington.

What this means for you

Inventory the covered data and processing separately, obtain the exact notice, consent or authorization required, control vendors and disclosures, and retain evidence against the current official text.

Other laws in United States
CA-DELETE

California Delete Act and Data Broker Requirements

California Privacy Protection Agency

CPPA

California Privacy Rights Act and California Privacy Protection Agency provisions

California Privacy Protection Agency

CLOUD-ACT

Clarifying Lawful Overseas Use of Data Act (CLOUD Act)

United States Department of Justice

42-CFR-P2

Confidentiality of Substance Use Disorder Patient Records

U.S. Department of Health and Human Services, Office for Civil Rights

CAN-SPAM

Controlling the Assault of Non-Solicited Pornography And Marketing Act

Federal Trade Commission

CPNI

Customer Proprietary Network Information Rules

Federal Communications Commission

DPPA

Drivers Privacy Protection Act

United States Department of Justice and federal courts

ECPA-SCA

Electronic Communications Privacy Act and Stored Communications Act

United States Department of Justice

FERPA

Family Educational Rights and Privacy Act

U.S. Department of Education, Student Privacy Policy Office

GINA

Genetic Information Nondiscrimination Act

U.S. Equal Employment Opportunity Commission and federal health agencies

HITECH

Health Information Technology for Economic and Clinical Health Act

U.S. Department of Health and Human Services, Office for Civil Rights

HIPAA

Health Insurance Portability and Accountability Act of 1996

U.S. Department of Health and Human Services Office for Civil Rights

IL-BIPA

Illinois Biometric Information Privacy Act

Illinois Attorney General and private enforcement

MT-CDPA

Montana Consumer Data Privacy Act

Montana Attorney General, Office of Consumer Protection

NJDPA

New Jersey Data Privacy Law

New Jersey Attorney General and Division of Consumer Affairs

PRIVACY-ACT

Privacy Act of 1974

U.S. Department of Justice, Office of Privacy and Civil Liberties

RI-DTPPA

Rhode Island Data Transparency and Privacy Protection Act

Rhode Island Attorney General

UCPA

Utah Consumer Privacy Act

Utah Attorney General and Division of Consumer Protection

VT-DPOSA

Vermont Data Privacy and Online Surveillance Act

Vermont Attorney General

VPPA

Video Privacy Protection Act

United States Department of Justice and federal courts