AL-PDPA
Alabama Personal Data Protection Act
Alabama Attorney General
← Back to laws in United States
Nebraska Data Privacy Act is part of the United States state privacy-law framework. It regulates covered processing of personal data about Nebraska residents and must be assessed separately from federal sectoral laws and other states' statutes.
Effective status: January 1, 2025
Citation: Neb. Rev. Stat. ss. 87-1101 through 87-1130
Source basis: Current Nebraska Revised Statutes, sections 87-1101 through 87-1130.
The Act generally applies to persons conducting business in Nebraska or producing products or services consumed by Nebraska residents that process or sell personal data and are not a small business as determined under the federal Small Business Act, subject to statutory exemptions. It does not use the common 100,000-consumer threshold.
Thresholds must be calculated using the law's defined consumer population and lookback period. Exemptions should be recorded at entity, data and processing-activity level; an exemption covering one regulated dataset should not automatically be applied to unrelated marketing, website, workforce or customer-support data.
Consumers may access, correct, delete and obtain portable data, and opt out of targeted advertising, sale and qualifying profiling. Controllers must provide an appeal process and recognize authorized-agent opt-outs where required.
The operational workflow should authenticate requests without collecting excessive new data, meet the applicable response period, document extensions and denials, propagate deletion and opt-out decisions where required, and preserve evidence of the response and any appeal.
Controllers must minimize collection, secure data, avoid incompatible uses and discrimination, publish notices, obtain consent for sensitive data, contract with processors and conduct data protection assessments for listed high-risk activities.
Processor agreements should identify instructions, purpose, duration, data types, confidentiality, subprocessor controls, deletion or return, audit information and assistance with rights, security, breach response and assessments to the extent required by the statute.
A small business remains prohibited from selling sensitive data without prior consumer consent even where the rest of the Act does not apply.
The Nebraska Attorney General has exclusive enforcement authority. The Act specifies notice, cure and civil-penalty procedures and does not create a private right of action.
Maintain an applicability memorandum, data map, notice versions, request and appeal logs, consent and opt-out records, processor contracts, assessment records, security evidence and a dated record of the official statutory version used. Recheck the official legislature and regulator sources before each scheduled legal review.
Use a shared multi-state privacy operating model, but configure it for this law's exact scope, exemptions, rights, deadlines, consent rules, opt-out signals, assessment triggers and enforcement provisions. Do not substitute a generic US privacy checklist for the state-specific controls.
Alabama Attorney General
California Privacy Protection Agency
California Privacy Protection Agency
California Privacy Protection Agency
Federal Trade Commission
United States Department of Justice
Colorado Attorney General
U.S. Department of Health and Human Services, Office for Civil Rights
Connecticut Attorney General
Federal Trade Commission
Federal Communications Commission
Delaware Department of Justice
United States Department of Justice and federal courts
United States Department of Justice
Consumer Financial Protection Bureau
U.S. Department of Education, Student Privacy Policy Office
Federal Trade Commission
Florida Department of Legal Affairs
U.S. Equal Employment Opportunity Commission and federal health agencies
Federal Trade Commission
U.S. Department of Health and Human Services, Office for Civil Rights
U.S. Department of Health and Human Services Office for Civil Rights
Illinois Attorney General and private enforcement
Indiana Attorney General
Iowa Attorney General
Kentucky Attorney General
Louisiana Attorney General
Maryland Attorney General
Minnesota Attorney General
Montana Attorney General, Office of Consumer Protection
Nevada Attorney General
New Hampshire Attorney General
New Jersey Attorney General and Division of Consumer Affairs
Oklahoma Attorney General
Oregon Attorney General
U.S. Department of Justice, Office of Privacy and Civil Liberties
Rhode Island Attorney General
Federal Communications Commission
Tennessee Attorney General
Texas Attorney General
Texas Attorney General
Utah Attorney General and Division of Consumer Protection
Vermont Attorney General
United States Department of Justice and federal courts
Virginia Attorney General
Washington Attorney General
Washington Attorney General