Nevada Revised Statutes Title 52. Trade Regulations and Practices § 603A.515. Deletion of consumer health data upon request by consumer; deletion by third party; delay of deletion of data on archived system or backup

1. Not later than 30 days after authenticating a request made pursuant to paragraph (d) of subsection 1 of NRS 603A.505 for the deletion of consumer health data, a regulated entity shall, except as otherwise provided in subsection 3:

2. Not later than 30 days after receiving notification of a deletion request pursuant to paragraph (b) of subsection 1, an affiliate, processor, contractor or other third party shall, except as otherwise provided in subsection 3, delete the consumer health data described in the request from the records and network of the affiliate, processor, contractor or other third party.

3. If data described in a deletion request made pursuant to paragraph (d) of subsection 1 of NRS 603A.505 is stored or archived on backup systems, a regulated entity or an affiliate, processor, contractor or other third party may delay the deletion of the data for not more than 2 years after the request is authenticated, as necessary to restore the archived or backup system.