Law / United States /
Nebraska
Employer limits on display, transmission and use of employee social security numbers
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition, Security
- Audit expectation
- none
As of .
What it requires
- If you are an employer, do not publicly post or publicly display in any manner more than the last four digits of an employee's social security number, including by making more than the last four digits available to the general public or to an employee's coworkers (Neb. Rev. Stat. 48-237(2)(a)).
- Do not require an employee to transmit more than the last four digits of the social security number over the Internet unless the connection is secure or the information is encrypted (48-237(2)(b)).
- Do not require an employee to use more than the last four digits of the social security number to access an Internet website unless a password, unique personal identification number or other authentication device is also required (48-237(2)(c)).
- Do not require an employee to use more than the last four digits of the social security number as an employee number for any type of employment-related activity (48-237(2)(d)).
- Use more than the last four digits only for compliance with state or federal law, internal administrative purposes, or a commercial transaction the employee freely and voluntarily enters into with you, and never as an identification number for occupational licensing, drug testing (unless required by law) or company meetings, in files with unrestricted access within the company, in files a temporary employee can reach unless bonded or insured, or for posting company information (48-237(3)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureYes
Criminal exposure note
Neb. Rev. Stat. 48-237(4) makes an employer's violation a Class V misdemeanor, which 28-106(1) punishes by no imprisonment and a fine of not more than one hundred dollars.
What this law does
An employer, meaning a person which employs any individual within Nebraska as an employee, may not publicly post or publicly display in any manner more than the last four digits of an employee's social security number, including by making more than the last four digits available to the general public or to an employee's coworkers.
An employer may not require an employee to transmit more than the last four digits of the social security number over the Internet unless the connection is secure or the information is encrypted, or to use more than the last four digits to access an Internet website unless a password, unique personal identification number or other authentication device is also required.
An employer may not require an employee to use more than the last four digits of the social security number as an employee number for any type of employment-related activity.
An employer may use more than the last four digits only for compliance with state or federal law, for internal administrative purposes, and for commercial transactions the employee freely and voluntarily enters into with the employer, and six listed internal uses are not permitted, including use in files with unrestricted access within the company and for posting any type of company information.
An employer who violates the section is guilty of a Class V misdemeanor, and evidence of a conviction is admissible at a civil trial as evidence of the employer's negligence.
When LexLint raises it
When your app profile says your app crawls the web, trains models or deploys a chatbot.