Distributes a software product, in Nebraska

Technology access clause, Neb. Rev. Stat. 73-205 · Read the law's page

• If you sell an automated information system or other information technology to a Nebraska state agency, the contract carries the technology access clause: as a condition for the expenditure of state funds, the input and output technology is to be capable of supporting modification and otherwise provide for equivalent access for both visual and nonvisual use (Neb. Rev. Stat. 73-205(2) and (3)).
• If you provide a Nebraska state agency a product or service containing information and communication technology, including software, applications, web sites, videos or electronic documents, that users interact with directly or that is public-facing, provide equivalent access to people who have and who do not have disabilities, or modify it during implementation to afford that access; complying with Section 508 and its Access Board standards satisfies the clause (Technology Access Clause, assurances 2 and 3).
• If you are a state agency, include the technology access clause in every contract that involves the purchase of an automated information system, whatever the source of funds, whether the purchase is made under delegated purchasing authority, or the source of law (73-205(1) and (3)).for a public body

Neb. Rev. Stat. section 87-808 (added by Laws 2018, LB757, section 7) · Read the law's page

• This binds any individual or commercial entity, including a government, governmental subdivision, agency, or instrumentality, that conducts business in Nebraska and owns, licenses, or maintains computerized data including a Nebraska resident's personal information.
• Implement and maintain reasonable security procedures and practices appropriate to the nature and sensitivity of the personal information held and to the nature, size, and resources of the business and its operations, including safeguards that protect the information when it is disposed of.
• Where personal information is disclosed to a nonaffiliated third-party service provider, require by contract that the provider implement and maintain reasonable security procedures and practices of its own, appropriate to the nature of the information disclosed and reasonably designed to protect it from unauthorized access, acquisition, destruction, use, modification, or disclosure.
• A business already subject to and compliant with the Gramm-Leach-Bliley Act Title V regulations or HIPAA and HITECH regulations, or with a state or federal law providing greater protection, is deemed to comply.
• There is no private right of action; only the Attorney General may enforce this section, as a deemed violation of Neb. Rev. Stat. section 59-1602, seeking a civil penalty of up to $2,000 per violation under section 59-1614.