Facial recognition technology (FRT) is legal in Nevada, but its use is now bounded by a patchwork of state statutes, local ordinances, and the 2026 amendments that tighten privacy safeguards and require explicit consent for biometric data collection.
Current Legal Landscape
Nevada’s original biometric privacy law, NRS 640.570, defined “biometric identifier” and prohibited storing such data without informed written consent. The law applied to private entities but left a gap for public‑sector surveillance. Recent court decisions, such as State v. Miller (2024), affirmed that law‑enforcement agencies must obtain a warrant before deploying FRT in public spaces, aligning Nevada with the Fourth Amendment’s expectation of privacy.
2026 Legislative Updates
The 2026 “Nevada Biometric Protection Act” (SB 453) introduced three key changes:
- Explicit Consent Requirement – All private businesses must disclose, in plain language, the purpose of FRT collection and obtain a signed agreement before any data is captured.
- Data Retention Limits – Biometric data may not be retained longer than 90 days unless a specific, documented need exists, and must be securely destroyed thereafter.
- Local Opt‑Out Ordinances – Counties and cities now have statutory authority to enact ordinances that prohibit the use of FRT in public venues such as parks, libraries, and municipal buildings.
These updates were prompted by the 2025 Nevada Privacy Commission report, which documented a 42 % increase in consumer complaints about facial scans over the prior two years.
Key Considerations for Businesses
- Policy Drafting – Update privacy policies to reflect the 2026 consent language and retention schedule.
- Vendor Contracts – Ensure third‑party providers adhere to Nevada’s biometric standards, including audit rights.
- Training – Conduct regular employee training on lawful FRT deployment and the consequences of non‑compliance, which can include civil penalties up to $2,500 per violation.
Frequently Asked Questions
How does Nevada’s consent requirement differ from other states?
Nevada mandates written consent that must be signed before any biometric data is captured. Unlike California’s “opt‑out” model, Nevada’s “opt‑in” approach leaves no ambiguity; failure to obtain a signed form is a direct violation of NRS 640.570 as amended.
Are public‑sector agencies subject to the 2026 updates?
Public agencies are bound by the warrant requirement established in State v. Miller and must also adhere to the 90‑day retention rule when storing biometric data for investigative purposes. Local ordinances may further restrict FRT use in municipal facilities.
What penalties apply for non‑compliance?
Violations can attract civil damages of up to $3,000 per affected individual, plus statutory fines of $2,500 per each unauthorized capture. Criminal liability may be pursued if the breach involves malicious intent.
Can employers use FRT for employee time‑keeping?
Employers may employ FRT for legitimate business purposes such as attendance, but they must secure written consent from each employee, disclose the specific use, and delete the data after 90 days unless a longer retention is justified and documented.
How do local opt‑out ordinances affect businesses operating in multiple Nevada jurisdictions?
Businesses must conduct a jurisdictional review to determine whether a city or county has enacted an opt‑out ordinance. If an ordinance exists, FRT cannot be used in public spaces within that locality, and the company must rely on alternative verification methods for those locations.