First statewide data classification standards introduced by Nevada

Nevada's Governor's Technology Office has introduced a new statewide data classification policy designed to standardize how agencies categorize and protect information, which is the first across the U.S., The Associated Press reports.

The policy which comes months after a cyberattack disrupted government systems for weeks establishes four data categories: public, restricted, sensitive, and confidential. Agencies must determine how information is classified, defaulting to a more restrictive category if uncertainty exists. The policy is described as a foundation for broader cybersecurity improvements, including multifactor authentication. Lawmakers have also prioritized cybersecurity since the attack, approving a new Security Operations Center and forming a legislative working group to guide future measures.

Officials said the framework will create a shared baseline for handling data and reduce hesitation when sharing information across agencies. The policy does not alter Nevada's public records law, under which records are presumed public unless confidentiality provisions apply.

"Together, these measures are intended to strengthen Nevada's overall digital resilience while enabling responsible data sharing across agencies," according to a press release.