Website Operators In or Targeting Nevada, You Have Privacy Policies To Implement by October 1, 2017
- Jodka, Sara H. Krieger, John L.
- Industry Alerts
Click “Subscribe Now” to get attorney insights on the latest developments in a range of services and industries.
As of October 1, 2017, Nevada will join California and Delaware to require the operators of certain websites and online services to post a notice on their website informing users about their privacy practices. The law, which will amend Nevada’s Security of Personal Information statute (NRS 603A – Security of Personal Information), will exclude in-state entities that derive revenue primarily from sources other than online sales and have fewer than 20,000 unique visitors per year. Under the law, five categories of information are expressly mandated to be in the notice. Specifically, the notice must:
- Identify the categories of “covered information” collected through the website and the categories of third parties with whom that information may be shared;
- Describe the process, if any, by which users may review and request changes to covered information collected through the website;
- Disclose whether third parties may collect information about users’ online activities from the website;
- Provide an effective date of the notice; and
- Describe how the website operator will notify consumers of material changes to the notices required to be made under the new law.
For purposes of this law, “covered information” includes:
- A first and last name;
- A home or other physical address that includes the name of a street and the name of a city or town;
- An electronic mail address;
- A telephone number;
- A social security number;
- An identifier that allows a specific person to be contacted either physically or online; and
- Any other information concerning a person collected from the person through the website or online service in combination with any identifier in a form that makes the information personally identifiable.
Once the law is enacted, the Nevada Attorney General will have the power to issue temporary or permanent injunctions and to assess penalties of up to $5,000 per violation to enforce compliance. The law does not establish a private cause of action, which means no individual website users can sue an entity for violating the law, but it also does not preempt any other remedies provided by law.
If you have any questions about the applicability of the law to your website or online services, or need your privacy policy updated and revised in line with the law, please contact one of our data privacy and cybersecurity attorneys.
This client alert is published by Dickinson Wright PLLC to inform our clients and friends of important developments in the field of data privacy and cybersecurity law. The content is informational only and does not constitute legal or professional advice. We encourage you to consult a Dickinson Wright attorney if you have specific questions or concerns relating to any of the topics covered in here.
FOR MORE INFORMATION CONTACT:
Sara H. Jodka is Of Counsel in Dickinson Wright’s Columbus office. She can be reached at 614.744.2943 or sjodka@dickinsonwright.com.
Justin L. Root is Of Counsel in Dickinson Wright’s Columbus office. He can be reached at 614.591.5465 or jroot@dickinsonwright.com.
John L. Krieger is a Member in Dickinson Wright’s Las Vegas office. He can be reached at 702.550.4439 or jkrieger@dickinsonwright.com.
For a printable version of this cybersecurity alert, click here.
Related Practices
Contacts
Recent Insights
- Webinars A Step-by-Step Guide Through California's (and now Nevada's) Consumer Privacy Acts
- Industry Alerts The Times They Are A-Changin’: More States and Cities Move Ahead of the Courts by Prohibiting the Use of Prior Salary Information in Hiring
- Industry Alerts Ohio’s Minimum Wage Set to Rise January 1, 2017 and Mandatory Poster
- August 13, 2024 In the News Reuters recently published an article by Greg Ewing titled, "But really, what cybersecurity requirements and standards does my company need to follow and why?"
- August 02, 2024 In the News Dan Cotter was recently interviewed on the Someone You Should Know podcast with Stuart Sax.
- June 17, 2024 In the News The Federation of Regulatory Counsel published Daniel Cotter's article, "Illinois Legislature passes major reform to BIPA."
- May 13, 2024 Industry Alerts Better Call Your Privacy Attorney: 3 New State Privacy Laws Begin July 1, 2024
- April 16, 2024 Video Minutes on the Matter with Daniel Cotter: History of the Biometric Information Privacy Act
- March 25, 2024 In the News Gregory Ewing Joins Dickinson Wright Washington, D.C. Office as a Member