Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party cloud storage services that collect personal information in Nevada? What are the requirements?

Based on the documents provided, if you are a data collector that maintains records containing personal information of a resident of Nevada, you must implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure [2.2].

If you are a third-party cloud storage service that collects personal information in Nevada, you must obtain a warehouse permit from the Nevada Transportation Authority to engage in the storage of household goods and effects [1.2]. The Nevada Transportation Authority may inspect any property proposed to be used for storage of household goods and effects to determine its suitability and examine the premises, books, and records of any permit holder [1.1].

Additionally, you must comply with the requirements for collecting, using, safeguarding, handling, retaining, storing, disseminating, and destroying records of criminal history in accordance with the provisions of NRS 179A.080 and the Security Policy and the Administrative Policies of the Nevada Criminal Justice Information System [3.1].

Regarding personal information, “personal information” means a natural person’s first name or first initial and last name in combination with any one or more of the following data elements, when the name and data elements are not encrypted: (a) Social security number. (b) Driver’s license number, driver authorization card number, or identification card number. (c) Account number, credit card number, or debit card number, in combination with any required security code, access code, or password that would permit access to the person’s financial account. (d) A medical identification number or a health insurance identification number. (e) A user name, unique identifier, or electronic mail address in combination with a password, access code, or security question and answer that would permit access to an online account [2.1].

Therefore, if you are a third-party cloud storage service that collects personal information in Nevada, you must obtain a warehouse permit from the Nevada Transportation Authority and comply with the requirements for collecting, using, safeguarding, handling, retaining, storing, disseminating, and destroying records of criminal history. Additionally, you must implement and maintain reasonable security measures to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure.

Source(s):
Jurisdiction

Nevada