Law note · Nevada
Consumer Health Data, access, disclosure, and deletion rights
A regulated entity processing consumer health data must give a Nevada consumer the right to access it, obtain a list of third parties it was disclosed to, stop its collection, sharing, or sale, and delete it, sector-scoped to health data rather than a general personal-data right. A controller must respond within 45 days, with one 45-day extension available, and must provide two free responses per consumer per year.
This provision is in force under the current codified text; the underlying research did not establish a dated original commencement this pass, so no effective_date is recorded here.
What it asks of an app
- Give a Nevada consumer the right to access their consumer health data, obtain a list of third parties it was disclosed to, stop its collection, sharing, or sale, and delete it.
- Respond to a consumer health data rights request within 45 days, with one 45-day extension available, and provide at least two free responses per consumer per year.
- Do not treat this right as reaching personal data outside the consumer health data sector. It does not create a general access, deletion, or portability right.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Nevada statute text, NRS chapter 603A, Nevada Legislature website