I’m not sure if many of you have heard, but Nevada’s SB227 mandates that all “personal information” be encrypted. During the introduction of this law there originally was a clear definition of what “personal information” was that was later removed by the 716 amendment which stated this bill would rely on the definition provided in NRS 603A.040 which defined Personal Information as the following:
1. Social security number.
2. Driver’s license number or identification card number.
3. Account number, credit card number or debit card number, in combination with any required security code, access code or password that would permit access to the person’s financial account.
The term does not include the last four digits of a social security number or publicly available information that is lawfully made available to the general public.
The passed SB227 does not define what is meant by “Personal Information”, which means that it seems they wish to have lawyers define it in case law. Who knows where this will go in our future…..