Nebraska consumer data privacy act

Identifier

Identifier

Neb. Rev. Stat. § 87-1101 et seq.

Level

State NE

Status

In force

Adopted

2024-04-17

Applies from

2025-01-01

Supervisory bodies

Nebraska AG

Named requirements

• Applicability and thresholds

  Neb. Rev. Stat. § 87-1101 et seq.

  No consumer number threshold. Applies to entities that are not small businesses under the SBA definition.

• Privacy notice

  Neb. Rev. Stat. § 87-1101 et seq.

  A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.

• Consumer rights

  Neb. Rev. Stat. § 87-1101 et seq.

  Access, deletion, portability, correction and opt-out of targeted advertising, sale and certain profiling, with an appeal route.

• Sensitive data

  Neb. Rev. Stat. § 87-1101 et seq.

  Consent, or in some states a strict necessity standard, before sensitive categories are processed.

• Data protection assessment

  Neb. Rev. Stat. § 87-1101 et seq.

  A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.

• Processor contract

  Neb. Rev. Stat. § 87-1101 et seq.

  A written contract that sets instructions, confidentiality, deletion or return, and audit rights.

• Enforcement

  Neb. Rev. Stat. § 87-1101 et seq.

  Enforced by the state authority. Texas style scope, written for a smaller state economy.

Official source

• nebraskalegislature.gov
• ago.nebraska.gov

EU acts on the same ground

• gdpr

  Covers the same ground as the GDPR on notice, rights and processor contracts, with a narrower scope and no general lawful basis requirement.