Health record rights in Nevada: what state law adds
In Nevada, as of October 3, 2026, your OK is needed before businesses outside HIPAA collect or share your health data, and your signed permission before they sell it; you get a free copy of your record in some cases; your records join the health information exchange only if you agree; reproductive health, mental health, HIV and genetic records each have a specific confidentiality rule; you can sue only in a narrow case; breach notices cover one of medical or health insurance information; and one of the three rules we look for on AI in care is in force. Each answer below quotes, dates and links the law. There is no state total and no state rank.
Laws read · page updated
Not legal advice. This records what the law said on the date we read it. Laws and court orders change. Read the law itself, or ask a lawyer, before you rely on it. State laws add to the federal floor. The national score rates federal law and national infrastructure and does not change with these state profiles.
The seven answers
Do apps and wearables need your OK before sharing health data?Yes. A consumer health data law requires your OK before a business collects or shares health data, and your signed permission before it sells it. Same answer in 2 of the 50 states, counting this one.
Can you sue if your records are misused?Only in a narrow case, such as a data breach or one kind of record. The laws below say which. Same answer in 31 of the 50 states, counting this one.
Must you be told if health data leaks in a breach?Partly. The breach notice law covers one of the two: medical information or health insurance information. Same answer in 3 of the 50 states, counting this one.
Are there rules for AI used in your care?One of the three rules is in force. A licensed clinician decides, not AI alone. Same answer in 12 of the 50 states, counting this one.
Federal law, mainly HIPAA, applies in every state; our US page explains it in plain English. Each answer below says what this state adds on top, with the law's name, citation, effective date, the words that matter and a link to the official page.
Do apps and wearables need your OK before sharing health data?
Federal floor: HIPAA does not cover most apps, wearables, websites or data brokers.
Yes. A consumer health data law requires your OK before a business collects or shares health data, and your signed permission before it sells it.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
SB 370 (NRS 603A.400 to 603A.550) applies to any regulated entity. It requires consent to collect or share and a signed written authorization to sell. In force since 31 March 2024.
Collection and sharing of consumer health data by regulated entity prohibited; exceptions. NRS 603A.500 (2023 Nev. Stat. ch. 525, SB 370)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
With the affirmative, voluntary consent of the consumer to whom the consumer health data relates, which must be separate and distinct from the consent provided pursuant to subsection 1 for the collection of the data;
Who it binds, in our words: "Regulated entity" means any person who: 1. Conducts business in this State or produces or provides products or services that are targeted to consumers in this State; and 2. Alone or with other persons, determines the purpose and means of processing, sharing or selling consumer health data. (NRS 603A.465)
Unauthorized sale or offering of consumer health data prohibited; required contents of authorization. NRS 603A.535 (2023 Nev. Stat. ch. 525, SB 370)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
A person who sells consumer health data shall provide a copy of the written authorization provided pursuant to subsection 1 to the consumer who signed the written authorization and the purchaser of the consumer health data.
Who it binds, in our words: Any person who sells or offers to sell consumer health data. The written authorization must include the signature of the consumer to which the consumer health data pertains.
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
This act becomes effective on March 31, 2024.
Who it binds, in our words: Whole act (NRS 603A.400 to 603A.550).
Second check by a separate agent: confirmed.
Do you get a copy faster or free in some cases?
Federal floor: HIPAA gives the provider 30 days, plus one 30-day extension, and allows a cost-based fee. We also count the federal information blocking rule (45 CFR Part 171).
In one way: a free copy in at least one case.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Free copy for Social Security and needs-based benefit claims goes beyond HIPAA and Part 171. No copy deadline under 30 days; the 10 working day rule covers inspection only. Fee caps are recorded as facts.
Free copy: Records needed to support a claim or appeal under the Social Security Act or a federal or state financial needs-based benefit program, for the patient or an authorized representative, with documentation of the claim (NRS 629.061(5)). First copy free; a second copy for the same claim may cost up to 60 cents per page.
Fee rule: NRS 629.061(4): copy for actual postage and copying cost, "not to exceed 60 cents per page for photocopies"; "No administrative fee or additional service fee of any kind may be charged for furnishing such a copy."
Fee rule: NRS 629.062(2): electronic copy fee "must not exceed $40 or the amount per page prescribed by NRS 629.061, whichever is less."
Fee rule: NRS 629.062(3)-(4): a $5 minimum fee, and $5, $20 and $25 fees for no-records confirmation, custodian certificate, film sheets and radiologic images (not for state or local government custodians).
Goes beyond the federal floor: yes.
Health care records: inspection; copies and related charges. NRS 629.061(5)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
or under any federal or state financial needs-based benefit program, without charge, to a patient, or a representative with written authorization from the patient, who requests it, if the request is accompanied by documentation of the claim or appeal.
Who it binds, in our words: Each custodian of health care records. The free copy is due within 30 days after receipt of the request.
Health care records: copy fee cap. NRS 629.061(4)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
the costs of making the copy, not to exceed 60 cents per page for photocopies and a reasonable cost for copies of X-ray photographs and other health care records produced by similar processes.
Who it binds, in our words: Each custodian of health care records. Records must be available for inspection within 10 working days (in state); no deadline is set for copies.
Furnishing of records electronically: request; method; fees. NRS 629.062 (2023 Nev. Stat. ch. 386, SB 283)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
any fee to furnish those records electronically pursuant to subsection 1 must not exceed $40 or the amount per page prescribed by NRS 629.061, whichever is less.
Who it binds, in our words: Custodians of health care records, including HIPAA covered entities and business associates. SB 283 sets no effective date, so NRS 218D.330 default of October 1 applies.
Second check by a separate agent: confirmed.
Can you say no to sharing through a health information exchange (a network that passes records between doctors)?
Federal floor: HIPAA lets providers share records for treatment without asking you.
Opt-in. Your records go through the exchange only after you agree.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Statute requires affirmative consent before records are retrieved from an HIE. No state-designated HIE name confirmed on a state page; NRS 439.587 lets the Director establish or contract with HIEs. Routine data already needs consent.
Set by state law.
Patient not required to participate in health information exchange; consent before retrieval. NRS 439.591(1) (as amended by 2025 Nev. Stat. ch. 514, SB 494, sec. 160)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
health care records may be retrieved from a health information exchange, the patient must be fully informed and affirmatively consent, in the manner prescribed by the Director of the Authority.
Who it binds, in our words: Any health information exchange in Nevada, except as provided in NRS 439.597(2).
Electronic transmission of health information; opt out of electronic disclosure. NRS 439.597(2) (as amended by 2011 Nev. Stat. ch. 313, SB 43)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
shall allow any person to opt out of having his or her individually identifiable health information disclosed electronically to other covered entities, except:
Who it binds, in our words: HIPAA covered entities. Medicaid and CHIP recipients may not opt out.
Second check by a separate agent: confirmed.
Are some sensitive records, like mental health or HIV, given extra rules?
These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.
Reproductive health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
NRS 232.0088 limits state agency disclosure of information to out-of-state proceedings about reproductive health care legal in Nevada. SB 131 took effect on approval, 30 May 2023.
State agency not to cooperate in investigation or proceeding initiated in or by another state relating to reproductive health care services. NRS 232.0088 (2023 Nev. Stat. ch. 82, SB 131)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
Except as required by the order of a court of competent jurisdiction, a state agency shall not provide any information or expend or use time, money, facilities, property, equipment, personnel or other resources in furtherance of any investigation or proceeding initiated in or by another state
Who it binds, in our words: Executive Department state agencies. Applies to services legal in Nevada.
Second check by a separate agent: disputed, then settled by a ruling drafted by an agent against the law's text and approved by the authors on October 3, 2026.
Mental health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
NRS 433A.360 limits release of mental health clinical records to listed cases, including written authorization by the consumer and court order.
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
The clinical record is not a public record and no part of it may be released, except as otherwise provided in subsection 2 or except:
Who it binds, in our words: Division facilities, private institutions, facilities offering mental health services and professionals providing assisted outpatient treatment.
Second check by a separate agent: confirmed.
HIV records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The rule covers all communicable diseases, and an exception in subsection 9 names HIV. Disclosure is limited to listed cases, including written consent.
Communicable disease information: confidentiality; permissible disclosure. NRS 441A.220 (as amended by 2025 Nev. Stat. ch. 514, SB 494, sec. 205)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
is confidential medical information and must not be disclosed to any person under any circumstances, including pursuant to any subpoena, search warrant or discovery proceeding, except:
Who it binds, in our words: Personal information about a person who has a communicable disease. Subsection 9 names persons diagnosed with the human immunodeficiency virus.
Second check by a separate agent: confirmed.
Genetic records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
NRS 629.171 requires informed consent before identifying genetic information is disclosed, with listed exceptions.
Disclosure of identity or genetic information of person without consent unlawful; exceptions. NRS 629.171 (as amended by 2023 Nev. Stat. ch. 386, SB 283)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
It is unlawful to disclose or to compel a person to disclose the identity of a person who was the subject of a genetic test or to disclose genetic information of that person in a manner that allows identification of the person, without first obtaining the informed consent
Who it binds, in our words: Any person. SB 283 sets no effective date, so NRS 218D.330 default of October 1 applies.
Second check by a separate agent: confirmed.
Can you sue if your records are misused?
Only in a narrow case, such as a data breach or one kind of record. The laws below say which.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
A private suit exists only for disclosure of genetic information. The consumer health data law creates no private right of action. The breach law lets a data collector, not the person, sue the wrongdoer.
Damages a court may award: None. NRS 629.201 allows actual damages, including costs and attorney's fees.
Right to bring civil action for disclosure of genetic information. NRS 629.201 (1997 Nev. Stat. ch. 412, AB 549)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
Any person who suffers an injury as a result of the disclosure of his or her genetic information by another person in violation of NRS 629.171 may bring a civil action for the recovery of his or her actual damages
Who it binds, in our words: Disclosures in violation of NRS 629.171.
Consumer health data: enforcement; no private right of action. NRS 603A.550(2)(a)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
(a) Do not create a private right of action; and
Who it binds, in our words: Consumer health data law (SB 370).
Second check by a separate agent: confirmed.
Must you be told if health data leaks in a breach?
Partly. The breach notice law covers one of the two: medical information or health insurance information.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Health insurance identification number is in the definition. Medical information is not; only a medical identification number is. No attorney general notice. Deeming clauses cover GLBA and own policies, not HIPAA.
Deadline to tell people: most expedient time possible and without unreasonable delay.
No duty found to tell the attorney general or a regulator.
"Personal information" defined. NRS 603A.040(1)(d) (as amended by 2015 Nev. Stat. ch. 55, AB 179)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
A medical identification number or a health insurance identification number.
Who it binds, in our words: Combined with a person's first name or first initial and last name, when not encrypted.
Disclosure of breach of security of system data. NRS 603A.220 (as amended by 2023 Nev. Stat. ch. 527, SB 355, sec. 17)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
The disclosure must be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement,
Who it binds, in our words: Data collectors that own or license computerized personal information; not persons licensed under chapter 675 of NRS. Notice to consumer reporting agencies when over 1,000 persons.
Second check by a separate agent: confirmed.
Are there rules for AI used in your care?
The three rules we look for: you must be told when AI is used in your care; a licensed clinician decides, not AI alone; you can reach a human, or have a human review the decision. Each counts only if the law names health care or health coverage.
One of the three rules is in force. A licensed clinician decides, not AI alone.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Clinician review counted from NRS 629.610(4): providers must review AI-generated billing records and session notes. No disclosure or human recourse rule found. Bans on AI therapy are recorded as prohibitions.
You must be told when AI is used in your care: not found.
A licensed clinician decides, not AI alone: in force.
You can reach a human, or have a human review the decision: not found.
Related limit on AI (recorded, not counted in the answer): NRS 629.610(1): "a provider of mental and behavioral health care shall not use an artificial intelligence system in connection with providing professional mental and behavioral health care directly to a patient."
Related limit on AI (recorded, not counted in the answer): NRS 433.567(2): "An artificial intelligence provider shall not make available for use by a person in this State an artificial intelligence system that is specifically programmed to provide a service or experience to a user that would constitute the practice of professional mental or behavioral health care if provided by a natural person."
Certain uses of artificial intelligence systems prohibited; exceptions for administrative support tasks. NRS 629.610(4) (2025 Nev. Stat., AB 406, sec. 8)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
A provider of mental and behavioral health care shall independently review the accuracy of any report, data or other information compiled, summarized, analyzed or generated by an artificial intelligence system for a purpose described in paragraph (c) or (e) of subsection 2.
Who it binds, in our words: Licensed or certified providers of mental and behavioral health care (psychiatrists, psychologists, clinical social workers, psychiatric nurses, therapists, counselors).
Prohibited activity of artificial intelligence provider. NRS 433.567 (2025 Nev. Stat., AB 406, sec. 7)
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
An artificial intelligence provider shall not make available for use by a person in this State an artificial intelligence system that is specifically programmed to provide a service or experience to a user that would constitute the practice of professional mental or behavioral health care
Who it binds, in our words: Artificial intelligence providers offering systems to persons in Nevada.
AB 406 effective date. AB 406 (2025), sec. 10
In force · effective · read October 3, 2026 · source(leg.state.nv.us)
On July 1, 2025, for all other purposes.
Who it binds, in our words: Sections 1 to 9 of AB 406.
Second check by a separate agent: confirmed.
Rights in practice: the setting
These public figures describe conditions that can affect whether people are able to use the rights above, such as health insurance and internet at home. They are not scored, not part of any answer, and not a reason for any answer. Each is the latest the source publishes for the state, checked against the publisher (the Census Bureau or the Bureau of Labor Statistics); grouped under the Healthy People 2030 social determinants of health.
Source and period on every row. Figures from DataSpine, each checked against its publisher. Not scored.
Figure
Value
Source and period
People under 65 without health insuranceHealth care access and quality
13.7%
Small Area Health Insurance Estimates, SAHIE 2024 (single-year model estimate)
Households with a computerHealth care access and quality
95.3%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a broadband internet subscriptionHealth care access and quality
88.7%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a smartphone and no other computerHealth care access and quality
9.1%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Median household incomeEconomic stability
$71,646 (2022 dollars)
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Unemployment rateEconomic stability
5.2%
Local Area Unemployment Statistics, December 2025, monthly, seasonally adjusted
Households without a vehicleNeighborhood and built environment
7.1%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
People who speak a language other than English at homeSocial and community context
29.8%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households of one person aged 65 or overSocial and community context
10.5%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Not shown: the number of people below the poverty line and the number with a bachelor's degree, which are available only as counts, and counts do not compare across states of different size.
Not shown yet, with no checked state figure: Medicare members who also have Medicaid; Medicaid enrollment; primary care supply; social vulnerability, income and jobs; people in nonmetro counties; social vulnerability, housing and transport; social vulnerability, household and minority themes.
Also recorded: a data broker registry
A fact, not part of any answer above. No law found We found no data broker registry law.
Another state
This study covers the 50 states and Washington, DC. It does not cover the US territories (Puerto Rico, Guam, the US Virgin Islands, the Northern Mariana Islands and American Samoa).
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research by AI agents built on Anthropic's Claude, checked by a second agent and ruled by the authors; how we did it. Research tool, not legal advice. Text CC BY 4.0.
