Nebraska Data Privacy Act, Attorney General enforcement

Neb. Rev. Stat. §§ 87-1119, 87-1122, 87-1124, 87-1125

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 January 2025.

An enforcement supervision rule binding private bodies.

As of 27 August 2026.

What it requires

Expect NDPA violations to be enforced exclusively by the Nebraska Attorney General, never by a private plaintiff.
Cure an identified violation and provide the required written statement within 30 days of Attorney General notice to avoid an enforcement action.

If you get it wrong

Private right of actionNo

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Nebraska Attorney General has exclusive authority to enforce NDPA. Before bringing an action, the Attorney General must give a controller or processor 30 days' written notice identifying the specific provisions violated; no sunset date for this cure right appears in the text read, unlike Connecticut's and Delaware's time-limited cure windows or Montana's eliminated one. Civil penalties run up to $7,500 per violation, and the Act creates no private right of action.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

official Nebraska statute text, Neb. Rev. Stat. §§ 87-1119, 87-1122, 87-1124, 87-1125

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app