1. "Operator" means a person who:
(a) Owns or operates an Internet website or online service for commercial purposes;
(b) Collects and maintains covered information from consumers who reside in this State and use or visit the Internet website or online service; and
(c) Purposefully directs its activities toward this State, consummates some transaction with this State or a resident thereof, purposefully avails itself of the privilege of conducting activities in this State or otherwise engages in any activity that constitutes sufficient nexus with this State to satisfy the requirements of the United States Constitution.
2. The term does not include:
(a) A third party that operates, hosts or manages an Internet website or online service on behalf of its owner or processes information on behalf of the owner of an Internet website or online service;
(b) An entity that is subject to the provisions of the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, as amended, and the regulations adopted pursuant thereto;
(c) A manufacturer of a motor vehicle or a person who repairs or services a motor vehicle who collects, generates, records or stores covered information that is:
(1) Retrieved from a motor vehicle in connection with a technology or service related to the motor vehicle; or
(2) Provided by a consumer in connection with a subscription or registration for a technology or service related to the motor vehicle; or
(d) A person who does not collect, maintain or make sales of covered information.
(Added to NRS by 2017, 4078; A 2019, 1172; 2021, 1674)
Structure Nevada Revised Statutes
Chapter 603A - Security and Privacy of Personal Information
NRS 603A.020 - "Breach of the security of the system data" defined.
NRS 603A.030 - "Data collector" defined.
NRS 603A.040 - "Personal information" defined.
NRS 603A.100 - Applicability; waiver of provisions prohibited.
NRS 603A.200 - Destruction of certain records.
NRS 603A.210 - Security measures.
NRS 603A.217 - Alternative methods of and technologies for encryption: Adoption of regulations.
NRS 603A.220 - Disclosure of breach of security of system data; methods of disclosure.
NRS 603A.260 - Violation constitutes deceptive trade practice.
NRS 603A.310 - "Consumer" defined.
NRS 603A.320 - "Covered information" defined.
NRS 603A.323 - "Data broker" defined.
NRS 603A.325 - "Designated request address" defined.
NRS 603A.330 - "Operator" defined.
NRS 603A.333 - "Sale" defined.
NRS 603A.337 - "Verified request" defined.
NRS 603A.338 - Applicability of provisions.
NRS 603A.348 - Operator authorized to remedy first failure to comply with notice requirements.