Nebraska has a comprehensive consumer privacy statute, the Nebraska Data Privacy Act (NDPA). This page collects our coverage touching Nebraska, alongside the federal rules that apply there. For the statute itself rather than the news, see our Nebraska privacy law page.
State Comprehensive Privacy Laws
October 26, 2026
Nebraska's design code, LB 504, was approved May 30, 2025 and became operative January 1, 2026. LB 838 rewrote its coverage test, more than doubled its list of engagement features and added two sections, effective July 18, 2026. Penalties of up to $50,000 became available July 1, 2026, and the Attorney General first pleaded the Act in October 2026.
Read more →
Breach Notification
October 26, 2026
Nebraska's Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006 requires a good-faith investigation before notice, routes every required notice to the Attorney General as well, offers a small-business newspaper option, and since 2018 carries a security duty enforced through the Consumer Protection Act.
Read more →
State Comprehensive Privacy Laws
October 26, 2026
Nebraska's Data Privacy Act, sections 1 to 30 of LB 1074 (2024), took effect January 1, 2025 at sections 87-1101 to 87-1130. It counts no consumers, reaching any business outside the federal small-business definition, and it still binds small businesses on selling sensitive data. Its cure demands proof, and no enforcement under it was found.
Read more →