In the spirit of the California Consumer Privacy Act (CCPA) and Europe's General Data Protection Regulation, Nevada has passed Senate Bill 2201, which amends their state's privacy laws and provides consumers with an "opt out" measure to forbid the sale of their personal information. This represents a continuation of a fairly new paradigm that transfers information ownership from companies to the people affected. SB2201 takes effect October 1st of this year. While CCPA exempts not for profit companies, Nevada did not follow this provision.
Companies collecting Nevada consumers’ information or doing business in Nevada will be required to notify consumers the details of personal information collected and how these consumers can change or correct the information. Consumers are also empowered to direct “no sale” of their personal information to those collecting such.
Identifiers under Nevada law include a: person’s name, address, email address, telephone number, social security number. Additional identifiers (e.g. handles) that can result in a person being contacted physically or online, or other information used to identify a consumer when combined with another identifier are also included.
The Nevada Attorney General (AG) is charged to enforce this new law and the law does not provide private recourse should it be violated. The AG may impose injunctions or penalties up to $5K per violation.