Nebraska Data Privacy Act (“NDPA”)
The Nebraska Data Privacy Act (LB 1074) (“NDPA”), passed on April 11, 2024, and became effective January 1, 2025, and includes specific coverage thresholds, universal opt-out mechanisms, opt in consent for sensitive data, data protection assessments, and a 30-day cure period. There is no threshold based on revenue or volume of personal data collected. And the law only applies to personal data collected in a business to consumer capacity and does not include employees or business-to-business contacts.
