Bill > SB370

This bill establishes various protections for "consumer health data" that is maintained and used by persons and nongovernmental entities. Key provisions include: - Requiring regulated entities (persons conducting business in Nevada or providing products/services to Nevada consumers who determine how consumer health data is processed, shared, or sold) to develop and maintain a privacy policy, and prohibiting them from collecting, sharing, or using consumer health data in ways that are inconsistent with that policy without the consumer's affirmative consent. - Generally prohibiting the collection or sharing of consumer health data without the consumer's affirmative consent, except to the extent necessary to provide a requested product or service. - Requiring regulated entities to comply with consumer requests to confirm if their data is being collected/shared/sold, provide a list of third parties with whom it has been shared, cease collection/sharing, or delete the data. - Imposing requirements on processors who handle consumer health data on behalf of regulated entities. - Prohibiting the sale of consumer health data without the consumer's written authorization, and placing restrictions on such sales. - Prohibiting the implementation of "geofences" (location tracking technology) near healthcare facilities for certain purposes. - Prohibiting discrimination against consumers for exercising their rights under the law. The bill also specifies that violations constitute deceptive trade practices, but do not create a private right of action.

Business and Industry

https://www.leg.state.nv.us/App/NELIS/REL/82nd2023/Bill/10323/Overview