Law / United States / 
Nevada
Unlawful acts regarding computers, private action and enforcement
Nev. Rev. Stat. Ann. 205.4765 to 205.513
In force.
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not knowingly, willfully and without authorization modify, damage, destroy, disclose, use, transfer, conceal, take, retain, copy, or obtain or attempt to obtain access to data, a program, equipment, or a computer, system or network connected to Nevada.
- Ordinary, non-disruptive automated access to a public page is not clearly addressed by this statute's authorization test, and no Nevada case resolves the question for scraping specifically.
- A violation that defrauds, causes more than $500 in response costs or damage, or interrupts a public service escalates from a misdemeanor to a category C felony carrying a fine of up to $100,000.
- A victim of a violation may bring a private civil action for response costs, loss, punitive damages, and attorney's fees regardless of whether any criminal charge is filed.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Private right of actionYes
Criminal exposure note
A bare violation of NRS 205.4765(1)-(5) is a misdemeanor; NRS 205.477 interference with or denial of access is a gross misdemeanor; either escalates to a category C felony under NRS 205.4765(6) where the act defrauded, caused over $500 in response costs or damage, or interrupted a public service.
Penalty structure
The $100,000 fine applies only to the aggravated category C felony tier (fraud scheme, response costs or damage over $500, or interruption of a public service); an unaggravated violation is a misdemeanor or gross misdemeanor under the general default penalties in NRS 193.140 and 193.150, not stated as a specific amount within this section.
- Rule
- Fixed only
- As of
- Currency
- USD
- Fixed cap
- 100,000
Who enforces it
Enforcement body
Attorney General or the appropriate district attorney (injunctive relief), in addition to ordinary criminal prosecution
Settledness
- As of
- Open questions
- Does obtaining access to an unauthenticated public web page by automated means occur "without authorization" under NRS 205.4765(1)?
What it makes you log
Logging duty
NRS 205.4765 to 205.513 define the unlawful acts regarding computers and give the victim a civil action (205.511) and the Attorney General or district attorney an injunction action (205.513). None requires a person to create, keep, produce or review a log or record; NRS 205.498 requires an Internet service provider to keep subscriber information confidential and to notify subscribers, which is a confidentiality duty and not a record duty. The sections state no territorial clause.
- Kind
- None
- As of
What this law does
Section 205.4765 makes it unlawful for a person, knowingly, willfully and without authorization, to modify, damage, destroy, disclose, use, transfer, conceal, take, retain, copy, or obtain or attempt to obtain access to data, a program, equipment, or a computer, system or network; a bare violation is a misdemeanor, escalating to a category C felony carrying a fine of up to $100,000 where the act was committed to defraud, caused response costs or damage over $500, or interrupted a public service.
Section 205.477 separately punishes knowing, willful, malicious and unauthorized interference with or denial of access to a computer, system or network as a gross misdemeanor. Section 205.509 presumes an employee authorized to access his or her employer's own systems, and the chapter does not otherwise define how authorization is read for a member of the public accessing an unauthenticated public page.
Section 205.511 gives any victim of a crime described in this range a private civil action for response costs, loss or injury, punitive damages, and attorney's fees, independent of any criminal charge or conviction, and section 205.513 lets the Attorney General or the appropriate district attorney seek an injunction. The 1983 act that added these provisions states no commencement day of its own.
Nevada's general rule makes a law passed by the Legislature become effective on October 1 following its passage unless it prescribes a different date.
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .