Nebraska Data Privacy Act, consumer rights

Neb. Rev. Stat. § 87-1108

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 January 2025.

A data subject rights rule binding private bodies.

As of 27 August 2026.

What it requires

Give a Nebraska consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
Respond to a consumer rights request without undue delay and within 45 days of receipt, with one 45-day extension available.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

NDPA gives a Nebraska consumer rights consistent with the other states researched in this batch, access, correction, deletion, a portable copy, and opt-out of targeted advertising, sale, and qualifying profiling, structure inferred from a cross-reference in the response-timing provision rather than independently pulled verbatim from the rights-granting section itself.

A controller must respond without undue delay and within 45 days after receipt of the request, with one 45-day extension available.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions

Read the law

official Nebraska statute text, Neb. Rev. Stat. § 87-1108

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app