Tracks devices, in Nevada

NRS 603A.215 · Read the law's page

• If you accept a payment card in connection with a sale of goods or services to a Nevada resident, comply with the current version of the Payment Card Industry (PCI) Data Security Standard adopted by the PCI Security Standards Council, with respect to those transactions, by the compliance date the standard itself sets.
• If you do not accept payment cards, do not transfer a Nevada resident's personal information through an electronic, nonvoice transmission other than a facsimile outside your secure system, and do not move a data storage device containing that personal information beyond your logical or physical controls, unless the data is encrypted using an encryption technology adopted by an established standards-setting body, with appropriate management and safeguards of the cryptographic keys.
• Compliance with this section, combined with a breach not caused by your own gross negligence or intentional misconduct, is a defense to damages for a breach of the security of the system data; a telecommunication provider acting solely to convey the communications of other persons is outside this section entirely.
• Expect an elderly or disabled Nevada resident harmed by a violation of this section to have an indirect civil action for damages through NRS 603A.260's deceptive-trade-practice deeming and NRS 598.0977, even though a general Nevada resident does not.

NRS 179.530 · Read the law's page

• Do not install or use a pen register or trap and trace device without first obtaining an order from a Nevada district court, except as the federal pen register and trap and trace statute otherwise provides.

NRS 603A.540 · Read the law's page

• This binds a person, which in the Nevada Revised Statutes means a natural person, any form of business or social organization or any other nongovernmental legal entity, unless a particular statute provides otherwise (NRS 0.039 and 603A.540(1)).
• Do not implement a geofence within 1,750 feet of any medical facility, facility for the dependent or any other person or entity that provides in-person health care services or products for the purpose of identifying or tracking consumers seeking in-person health care services or products (NRS 603A.540(1)(a)).
• Do not implement a geofence within 1,750 feet of any such facility, person or entity for the purpose of collecting consumer health data (NRS 603A.540(1)(b)).
• Do not implement a geofence within 1,750 feet of any such facility, person or entity for the purpose of sending notifications, messages or advertisements to consumers related to their consumer health data or health care services or products (NRS 603A.540(1)(c)).

NRS 603A.210 · Read the law's page

• This binds any data collector, a term defined to include a governmental agency, institution of higher education, corporation, financial institution, retail operator, or other business entity or association, that maintains records containing the personal information of a Nevada resident.
• Implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure.
• If you are a governmental agency, additionally comply, to the extent practicable, with the current version of the CIS Controls published by the Center for Internet Security or the corresponding National Institute of Standards and Technology standards, with respect to the collection, dissemination, and maintenance of those records.
• Require, by contract, any person to whom you disclose a Nevada resident's personal information to implement and maintain the same reasonable security measures.
• Compliance with a state or federal law that requires greater protection for the same records is deemed compliance with this section.
• Expect an elderly or disabled Nevada resident harmed by a violation of this section to have an indirect civil action for damages through NRS 603A.260's deceptive-trade-practice deeming and NRS 598.0977, even though a general Nevada resident does not.