Nevada

For Nevada, statute citation is NRS 603A.220; individual notice deadline is in the most expedient time possible and without unreasonable delay; consumer reporting agency notice trigger (residents) is more than 1,000 persons at any one time; encryption safe harbor is yes; notes is No AG notification requirement and no numeric hard deadline are stated in NRS 603A.220. GLBA-covered entities in compliance with GLB privacy and security requirements are deemed in compliance. Persons licensed under NRS Chapter 675 are exempt (subsection 7), recorded from its source on 2026-08-18.

Values marked our reading are our classification of what the source says — the source does not print them in those words. The quote below is the evidence for each one; judge it yourself.

What the source says

a data collector that owns or licenses computerized data which includes personal information shall disclose any breach of the security of the system data following discovery or notification of the breach to any resident of this State whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. The disclosure must be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement, as provided in subsection 3, or any measures necessary to determine the scope of the breach and restore the reasonable integrity of the system data.

— leg.state.nv.us, retrieved 2026-08-18

Source

• leg.state.nv.ushttps://www.leg.state.nv.us/NRS/NRS-603A.html#NRS603ASec220

Last verified against source: 2026-08-18. Due for re-check by 2027-02-14. This page as Markdown · OKF bundle · full dataset as JSON.