Nevada Adopts New Statewide Data Privacy Framework

Nevada Adopts New Statewide Data Privacy Framework

Nevada Adopts New Statewide Data Privacy Framework

https://www.govtech.com/security/nevada-adopts-new-statewide-data-privacy-framework

Publish Date: 2026-02-11 13:09:00

Source Domain: www.govtech.com

Nevada has adopted a Statewide Policy for Data Classifications, which establishes a framework for how information across the executive branch is classified and protected.

State IT leadership is focused on improving cybersecurity in 2026. A significant cyber incident in August, in which some data was moved outside of the state’s network, illuminated some security needs. But cybersecurity was a priority even before this event, as demonstrated by the 2025 creation of a new Office of Information Security and Cyber Defense.

The new policy, approved Feb. 2 by the CIO and chief data officer, took effect Tuesday. It creates a uniform framework for data-handling expectations, which is expected to support more efficient data sharing across agencies.


The policy has a wide-reaching scope. It applies to all executive branch agencies, departments, divisions, boards and commissions, as well as all state employees, contractors, vendors and third parties who access or manage state data. It also applies to all the information systems, applications and platforms on which state data is stored or processed.

The framework applies to all information assets created, collected, processed, stored, transmitted or disposed of by, or on behalf of, state government. Notably, this policy defines information assets more broadly than previous data privacy approaches, to include paper records, emails, system configurations, images and intellectual property.

The framework uses a four-tier classification system for information assets. The first is public data, which is information that is approved for unrestricted disclosure, like public meeting agendas or press releases. The second is sensitive data, which is internal information that, while not confidential, is intended for operational use, like internal communications and budget working documents.

The third is confidential data, which includes legally protected data in which…

Source