Law / United States / 
Nebraska
Nebraska Data Privacy Act (NDPA), processor's information to demonstrate compliance
Neb. Rev. Stat. § 87-1115(2)(f)(iii)
In force since .
A comprehensive regime rule binding private bodies.
- Obligation class
- Contract terms, Governance
- Audit expectation
- none
As of .
What it requires
- Include in every contract with a processor a requirement that the processor make available to you, on reasonable request, all information in its possession necessary to demonstrate its compliance with the requirements of the Data Privacy Act (section 87-1115(2)(f)(iii)).
These lines are LexLint's reading of the law's text, as of .
What it makes you log
Who may demand the log
Counterparty
Logging duty
Section 87-1115(2)(f)(iii) makes the contract between a controller and a processor require the processor to make available to the controller, on reasonable request, all information in the processor's possession necessary to demonstrate the processor's compliance with the requirements of the Act. A processor cannot meet that without records of its processing, but the text names no log, field or period, so no contents or retention are taken, and the access is the controller's under the contract; no regulator is named in the paragraph. Section 87-1115(2)(f)(iv) and section 87-1115(3), which let the controller assess the processor or accept an independent assessor's report on request, sit outside the cited paragraph. The section has no scope clause; the consumer definition in 87-1102(7) and the applicability clause in 87-1103 are not cited by this row, so no territorial hook is taken from it.
- Kind
- Implicit
- As of
- Provision
- Neb. Rev. Stat. 87-1115(2)(f)(iii) (a processor makes available the information needed to demonstrate its compliance)
- Trigger
- personal_data_processing
What this law does
NDPA requires the contract between a controller and a processor to require the processor to make available to the controller, on reasonable request, all information in the processor's possession necessary to demonstrate the processor's compliance with the requirements of the Act. The Nebraska Legislature's statute page gives Laws 2024, LB1074, section 15, as the source of section 87-1115. Sections 1 to 30 of Legislative Bill 1074 became operative on .
When LexLint raises it
When your app profile says your app sends automated outreach, crawls the web, deploys a chatbot, processes biometric data, processes voice recordings or trains models.