On June 2 and June 5, 2023, the Connecticut and Nevada state legislatures, respectively, voted in favor of sending legislation to their governors for signature that would impose restrictions, among others, on the processing of consumer health data, including geofencing provisions. Nevada S.B. 370 was signed by Nevada Governor Joe Lombardo on June 16, 2023.
Continue Reading Connecticut and Nevada Legislatures Pass Health Data Laws
Nevada
Nevada’s Governor Expands State’s Internet Privacy Law That Previously Limited Right to Opt Out of Sales
Posted on
On June 2, 2021, Nevada’s governor approved SB 260 (the “Amendment Bill”), which expands on the previously amended Nevada Privacy of Information Collected on the Internet from Consumers Act (the “Act”). Specifically, the Amendment Bill broadens the definition of key terms along with providing several new exemptions.
Continue Reading Nevada’s Governor Expands State’s Internet Privacy Law That Previously Limited Right to Opt Out of Sales
Nevada Law Provides Consumers with Limited Right to Opt Out of Sale
Posted on
Posted in Online Privacy, U.S. State Law
On May 29, 2019, Nevada’s governor approved SB 220, which provides amendments to an existing law that requires operators of websites and online services to post a notice on their website regarding their privacy practices. This blog entry provides a summary of the Amendment Bill.
Continue Reading Nevada Law Provides Consumers with Limited Right to Opt Out of Sale
Ninth Circuit Reverses District Court Decision in Zappos Consumer Data Breach Case
Posted on
Posted in Enforcement, Security Breach
On March 8, 2018, the Ninth Circuit Court of Appeals reversed a decision from the United States District Court for the District of Nevada.
Continue Reading Ninth Circuit Reverses District Court Decision in Zappos Consumer Data Breach Case
Nevada Enacts Website Privacy Notice Law
Posted on
Posted in Online Privacy, U.S. State Law
Recently, Nevada enacted an online privacy policy law which will require operators of websites and online services to post a notice on their website regarding their privacy practices. Nevada is the third state to enact legislation requiring website operators to post a public privacy notice, following California (enacted in 2004) and Delaware (enacted in 2016). …
Continue Reading Nevada Enacts Website Privacy Notice Law
Nevada Expands Definition of Personal Information
Posted on
Nevada’s revised data security law, which includes an expanded definition of personal information, takes effect on July 1, 2015. …
Continue Reading Nevada Expands Definition of Personal Information
PCI Data Security Standards Council Provides Cloud Compliance Guidelines
Posted on
Posted in Financial Privacy, Information Security
On June 14, 2011, the PCI Security Standards Council’s Virtualization Special Interest Group published guidelines to provide context for the application of the Payment Card Industry Data Security Standard to cloud and other virtual environments.
…
Continue Reading PCI Data Security Standards Council Provides Cloud Compliance Guidelines
States Attempt to Address Privacy Risks Associated with Digital Copiers and Electronic Waste
Posted on
Posted in Information Security, U.S. State Law
Pending legislation in Connecticut, Florida, Nevada, New Jersey and Oregon aims to address the privacy risks associated with devices that may store personal information on their hard drives. A New York law addressing these issues came into effect on April 1, 2011.
…
Continue Reading States Attempt to Address Privacy Risks Associated with Digital Copiers and Electronic Waste
Nevada and New Hampshire Data Security and Privacy Laws Take Effect
Posted on
On January 1, 2010, two important state data security and privacy laws took effect in Nevada and New Hampshire. The laws create new obligations for most companies that do business in Nevada and for health care providers and business associates in New Hampshire.Continue Reading Nevada and New Hampshire Data Security and Privacy Laws Take Effect
Nevada Updates Encryption Law and Mandates PCI DSS Compliance
Posted on
As of January 1, 2010, Nevada law will require businesses to use encryption when data storage devices that contain personal information are moved beyond the physical or logical controls of the business, in addition to continuing to require that personal information be encrypted if it is transferred outside the secure system of the business. The…