Nebraska Data Privacy Act (NDPA), general applicability and controller/processor duties

Neb. Rev. Stat. §§ 87-1101, 87-1107 to 87-1114

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 January 2025.

A comprehensive regime rule binding private bodies.

As of 27 August 2026.

What it requires

Confirm you conduct business in Nebraska, or produce a product or service used by Nebraska residents, and process or sell personal data before relying on NDPA's scope in compliance planning.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

NDPA governs private-sector processing of Nebraska residents' personal data. Enacted as part of omnibus Legislative Bill 1074 (108th Legislature), approved by the Governor April 17, 2024, effective January 1, 2025 per consistent secondary reporting; the enactment date is corroborated by the slip law's own title as reported, rather than independently confirmed against primary text. Controller and processor duties are allocated across sections 87-1107 to 87-1114.

When LexLint raises it

automated_outreach
crawls_web
deploys_chatbot
processes_biometrics
processes_voice
trains_models

Read the law

official Nebraska statute text, Neb. Rev. Stat. §§ 87-1101 to 87-1130

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app