weather icon Clear

New law improves online protections for homeowners

Note: This is the first of two columns by Las Vegas attorney Adam H. Clarkson. Today, he addresses Senate Bill 378, which imposes cybersecurity insurance and data protection requirements for homeowners associations’ online assessment payment processors. Next week, he will address what the new law says about email notices.

Did you know that prior to Nevada’s 2023 legislative session the persons processing your online payments for your homeowners association were not required to maintain cybersecurity insurance to provide coverage in the event the information you provided them, such as your bank account and/or credit card numbers, was stolen due to your transaction with them? It’s frightening, but true.

In fact, effective this year a prior law passed in 2021 would have forced HOAs to allow for online payment processing without imposing cybersecurity or cyber liability insurance requirements. Fortunately, this issue was caught and addressed by the state Legislature.

Pursuant to SB378, which was adopted this session and went into law earlier this year, entities processing homeowner payment transactions are now required to maintain a minimum of $5 million in cybersecurity insurance “that provides coverage for losses arising out of or relating to data breaches, unauthorized intrusions into an information system, computer viruses, ransomware, identity theft and similar exposures.”

In most cases, this will be a nonissue for large banks that are already insured for these issues and are handling the transactions. However, any person or entity not so insured will be precluded from engaging in the business of handling homeowners’ personal information related to owners’ online HOA payments. Also, associations offering online payment services, even when offered through a portal that is ultimately processed by a well-insured bank, must also maintain certain minimum cyber-insurance amounts to protect the HOA and its members from any cyber-theft-related claims.

Not only does SB378 impose cyber-insurance requirements for persons processing homeowners’ payments online, but it also expressly imposes data protection requirements. Notably, SB378 imposes the protection for personal information requirements of Nevada Revised Statutes 603-A.010 to 603-A.290 upon HOA online assessment payment processors. What does that mean? It means that HOA payment processors must use special encryptions and other data protection methodologies to protect information provided to them, like homeowners’ bank account numbers, credit card numbers, user names and unique identifiers, including passwords combined with e-mails.

Should your HOA utilize online payment portals for assessment payments? Opinions on this issue may vary significantly based upon the cost-benefit to an association. Fortunately, thanks to SB378, HOAs will no longer be forced to use such systems despite the liabilities and costs.

Instead, SB378 expressly requires an HOA’s board to perform a cost-benefit analysis as to whether an online payment system makes sense for a particular association. Such an analysis will involve considering issues such as, but not limited to, costs of obtaining cybersecurity insurance, benefits of online payment accessibility, liabilities for cyber-theft claims, expenses of maintaining such systems and related concerns.

If your HOA offers an online payment portal for assessment payments, will you be able to pay online after you have been sent to collections for delinquent payments? No. HOAs are required to suspend access to online payment portals once a homeowner has been sent to a third-party collection company. Of course, this will not impact owners who make their payments on time or a little late.

Adam H. Clarkson, Esq., CCAL, is the owner of The Clarkson Law Group, P.C. a community association law firm. Clarkson is a member of the Fellows of the Community Associations Institute’s (CAI) College of Community Association Lawyers. He is the chair of CAI’s Nevada Legislative Action Committee, former chair and current member of the CAI Nevada Political Action Committee, past president and current member of the CAI Nevada Chapter board of directors, the industry representative on the Nevada Department of Business & Industry’s CIC Task Force and a member of the Nevada State Bar Real Property Committee. He also is co-author of the Common Interest Community Section of the “Nevada State Bar Real Property Practice Manual.”

Don't miss the big stories. Like us on Facebook.
Why are HOA potlucks so complicated?

Q: Are there any requirements for a potluck that would be held at the community clubhouse? I received three conflicting opinions.

Homeowner gets bid but does not follow proper procedure

Per Nevada Revised Statutes 116.31086, bids must be opened and read during the board meeting. Technically, the board could disqualify the vendor’s bid.

Hot water heaters usually responsibility of condo owner

Unless your governing documents state otherwise, hot water heaters are the personal property of the homeowners. Technically, the homeowners are monitoring them and are replacing them when needed, somewhere around seven years, if they are being properly maintained. At 10 years of age, you definitely need to replace your hot water heater.

HOA board learns dog parks are expensive

We recently looked into adding an official dog park to our community with separate sections for large and small dogs. In the end we did not proceed. Here are the main reasons:

HOA budgets landscaping costs to meet SNWA requirements

Reserve specialists are supporting the use of the reserve funds allocated for landscaping to help address the changes to the landscape as mandated by the Southern Nevada Water Authority.

Homeowner wants nearby in-person HOA meetings

Associations that are conducting their meetings online do have a responsibility to improve their technology.

Homeowner wants to recall board; fire manager

Under Nevada Revised Statutes 116.3108 (2), you would need a signed petition by at least 10 percent of your homeowners calling for a recall meeting.

HOA needs to get cyber-security insurance

Yes, both your association and your master association will be required to maintain cyber-security insurance.

There is a legal process to recall HOA board

Under Nevada Revised Statutes 116.3106, a removal election may be called by the owners constituting at least 10 percent or any lower percentage specified in the bylaws of the total number of voting members of the association.

HOA tells homeowner to remove rainbow flag

Q: I live in a large community in Las Vegas. Recently the HOA pressured a homeowner to remove a rainbow flag. Can a resident asked to remove a flag refuse when “the other side” is allowed?