Nevada § 388.293 Plan for security of data concerning pupils; successor entities of school service providers; notice of security breach

Nevada Statutes

§ 388.293 — Plan for security of data concerning pupils; successor entities of school service providers; notice of security breach

Nevada § 388.293

Title 34EDUCATION

Ch. 388System

School Service Providers

This text of Nevada § 388.293 (Plan for security of data concerning pupils; successor entities of school service providers; notice of security breach) is published on Counsel Stack Legal Research, covering Nevada primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Nev. Rev. Stat. § 388.293 (2026).

Text

1. A school service provider shall establish and carry out a detailed plan for the security of any data concerning pupils that is collected or maintained by the school service provider. The plan must include, without limitation:

(a)Procedures for protecting the security, privacy, confidentiality and integrity of personally identifiable information concerning a pupil; and

(b)Appropriate administrative, technological and physical safeguards to ensure the security of data concerning pupils. 2. A school service provider shall ensure that any successor entity understands that it is subject to the provisions of NRS 388.281 to 388.296 , inclusive, and agrees to abide by all privacy and security commitments related to personally identifiable information concerning a pupil collected and maintaine

Free access — add to your briefcase to read the full text and ask questions with AI

1. A school service provider shall establish and carry out a detailed plan for the security of any data concerning pupils that is collected or maintained by the school service provider. The plan must include, without limitation:
(a) Procedures for protecting the security, privacy, confidentiality and integrity of personally identifiable information concerning a pupil; and
(b) Appropriate administrative, technological and physical safeguards to ensure the security of data concerning pupils.
2. A school service provider shall ensure that any successor entity understands that it is subject to the provisions of NRS 388.281 to 388.296 , inclusive, and agrees to abide by all privacy and security commitments related to personally identifiable information concerning a pupil collected and maintained by the school service provider before allowing a successor entity to access such personally identifiable information.
3. A school service provider shall provide notice to a school district, charter school or university school for profoundly gifted pupils, as applicable, or a private school pursuant to NRS 394.1616 , of any breach of the security of the system data in violation of the plan and any actions taken or being taken by the school service provider to address the breach. The notice must be provided as soon as practicable and without unreasonable delay.
4. A school district, charter school, university school for profoundly gifted pupils or private school that receives a notice pursuant to subsection 3 shall provide the notice to each pupil affected by the breach or, if a pupil is less than 18 years of age, the parent or legal guardian of the pupil. The notice must be provided as soon as practicable and without unreasonable delay.
5. As used in this section, “breach of the security of the system data” means unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of data concerning pupils that is collected or maintained by the school service provider. The term does not include the good faith acquisition of data concerning pupils by an employee or agent of the school service provider for a legitimate purpose of the school service provider, so long as the data is not used for a purpose unrelated to the school service provider or subject to further unauthorized disclosure.