2023 Nevada Revised Statutes
Chapter 603A - Security and Privacy of Personal Information
NRS 603A.515 - Deletion of consumer health data upon request by consumer; deletion by third party; delay of deletion of data on archived or backup system. [Effective March 31, 2024.]
1. Not later than 30 days after authenticating a request made pursuant to paragraph (d) of subsection 1 of NRS 603A.505 for the deletion of consumer health data, a regulated entity shall, except as otherwise provided in subsection 3:
(a) Delete all consumer health data described in the request from the records and network of the regulated entity; and
(b) Notify each affiliate, processor, contractor or other third party with which the regulated entity has shared consumer health data of the deletion request.
2. Not later than 30 days after receiving notification of a deletion request pursuant to paragraph (b) of subsection 1, an affiliate, processor, contractor or other third party shall, except as otherwise provided in subsection 3, delete the consumer health data described in the request from the records and network of the affiliate, processor, contractor or other third party.
3. If data described in a deletion request made pursuant to paragraph (d) of subsection 1 of NRS 603A.505 is stored or archived on backup systems, a regulated entity or an affiliate, processor, contractor or other third party may delay the deletion of the data for not more than 2 years after the request is authenticated, as necessary to restore the archived or backup system.
(Added to NRS by 2023, 3459, effective March 31, 2024)