Nevada Expands Online Privacy Law Which Now Applies to Brokers

Nevada has amended its online privacy law, SB260, to include additional obligations for qualifying "data brokers" and allow consumers to opt out of a wider range of personal information sales. This follows other recent amendments by New York City, Virginia, and California. The amendment includes new requirements for data brokers, expanded opt-out rights, enforcement by the Attorney General, and steps for companies to prepare, and will be effective on October 1, 2021. Nevada's online privacy law now applies to all data brokers, including those who purchase and sell covered information about Nevada residents without a direct relationship. Starting October 1, 2021, the law will apply to all data brokers, except for certain types of individuals and certain types of information that might qualify as covered information. Qualifying data brokers must establish a designated request address for consumers to opt out of the sale of their covered information. Eligible consumers can make verified opt-out requests at any time, and data brokers have 60 days to respond. If necessary, they can extend the response window by 30 days with sufficient notice to the consumer.