AB 589 makes two major changes to Nevada privacy law. First, it creates new protections for “autism-related data,” defined as personally identifiable information showing that a person has autism spectrum disorder or is suspected of having it. State agencies, local governments, and their contractors or grantees would generally be barred from collecting such data unless it is needed to administer autism-related benefits or services, provide medical or specialized care, audit or evaluate education programs, or ensure compliance with law. The bill also sharply limits disclosure of autism-related data, generally allowing it only with informed written consent, by court order or subpoena, when needed to provide services or supports, or when required by law. It further directs the Governor’s Office to review compliance every two years and allows DHHS to convene advisory groups to recommend implementation improvements.
Second, the bill expands and strengthens Nevada’s laws governing genetic information and DNA samples. It broadens the definition of “genetic test” to cover tests that derive and interpret genetic characteristics more generally, and it adds a definition of “DNA sample.” The bill makes it unlawful, except in specified circumstances, to obtain, retain, sell, transfer, or disclose DNA samples or genetic information without informed consent. It also creates new criminal penalties for unauthorized transfer of DNA or genetic information, unauthorized disclosure of identifying genetic information, and unauthorized genetic testing of another person’s DNA sample. In addition, it authorizes a civil action for a person injured by certain unauthorized genetic testing and requires the State Board of Health to adopt consent procedures and forms.
The bill’s impact on state law is significant because it adds new confidentiality rules to Nevada’s public records and health/privacy framework and amends Chapter 629 to create broader protections for genetic material and genetic data. Autism-related data in government possession is expressly treated as nonpublic, and the bill applies to data already held by agencies and contractors. For genetic information, the bill updates existing misdemeanor provisions, adds new felony offenses, and expands the scope of regulated conduct to include DNA sample transfers and unauthorized testing. It also preserves exceptions for law enforcement, court orders, paternity/parentage determinations, newborn screening, certain medical uses, and HIPAA-permitted disclosures.
The general sentiment reflected in the bill’s passage was favorable, with strong majority support in both chambers. The Assembly passed it 27-14 and the Senate passed it 13-7, indicating bipartisan support but not unanimity. The bill was also handled as an emergency request, suggesting lawmakers viewed the privacy protections as time-sensitive and important.
The main points of contention are likely the breadth of the new restrictions and the criminal penalties attached to genetic-data handling. Potential concerns include whether the autism-data limits could complicate data sharing for education, health, or service coordination, and whether the genetic provisions could affect research, consumer genetics, medical testing, or data transfers by private entities. Supporters appear to prioritize privacy, informed consent, and protection against misuse of sensitive health and genetic information, while opponents likely focused on implementation burdens, enforcement scope, and the risk of overcriminalization.
AB 589 amends Nevada law to create new confidentiality and use restrictions for autism-related data held by state agencies, local governments, and their contractors or grantees, and it makes such data nonpublic under the state public records law. It also revises Chapter 629 to broaden protections for genetic information and DNA samples, add new prohibitions on transfer and testing without informed consent, create new felony and misdemeanor penalties, authorize a civil remedy for certain unauthorized genetic testing, and require health regulations governing informed consent procedures.
The bill appears to have been generally well received by supporters as a privacy-protection measure, and it passed both chambers with clear majority support. At the same time, the recorded votes show meaningful opposition, suggesting some lawmakers had reservations about the scope of the restrictions, the criminal penalties, or the administrative impact on agencies, providers, and researchers.
The most likely areas of contention are the bill’s broad limits on collecting and disclosing autism-related data, the treatment of that data as confidential even when already held by government entities, and the expansion of criminal liability for handling genetic information and DNA samples. Critics may worry about effects on research, service coordination, education records, medical operations, and private genetic-testing or data-transfer practices, while supporters emphasize informed consent, privacy, and preventing misuse of highly sensitive personal information.