Story perspectives

Nevada Enacts New Data Privacy Policy Post-Cyberattack

2/12/2026

Summary

Story summary

Nevada's IT agency, announced by the Governor’s Technology Office, implements a new data privacy policy after a major cyberattack.
The policy defines four data sensitivity categories—public, sensitive, confidential, restricted—and a framework to classify data.
Compliance is mandatory, with penalties for violations specified within the policy.
The policy supports broader cybersecurity efforts, including a Security Operations Center to monitor threats and boost resilience.

1 of 1

Story summary

Nevada's IT agency, announced by the Governor’s Technology Office, implements a new data privacy policy after a major cyberattack.
The policy defines four data sensitivity categories—public, sensitive, confidential, restricted—and a framework to classify data.
Compliance is mandatory, with penalties for violations specified within the policy.
The policy supports broader cybersecurity efforts, including a Security Operations Center to monitor threats and boost resilience.