Lege Trend: Expand Definition of Personal Information to Trigger Notification

Nevada is the most recent state to expand the definition of personal information that trigger data security laws. 

The expanded definition includes:

• individual’s medical identification number or health insurance identification number and
• a user name, unique identifier or email address with its associated password, access code or security question and answer that would permit access to an online account

This reflects a growing trend to include email address/usernames along with passwords in state data security statutes. 

Assembly Bill 179