NRS 242.129: Confidentiality of certain records.

1. Any record of a state agency, including, without limitation, a record of the Office of Information Security and Cyber Defense or local government or a record obtained from a private entity which identifies the detection or investigation of or a response to a suspected or confirmed threat to or attack on the security of an information system is not a public record and may be disclosed by the Deputy Director only to another state agency, local government, a cybersecurity incident response team convened pursuant to NRS 242.1283 and appropriate law enforcement or prosecuting authorities and only for the purposes of preparing for and mitigating risks to, and otherwise protecting, the security of an information system or as part of a criminal investigation.

2. The Office of Information Security and Cyber Defense shall not require any private entity to provide any information or data that, in the sole discretion of the private entity, would compromise any information system operated or maintained by the private entity if such information or data were made public.