Law / United States /
Nebraska
Genetic Information Privacy Act, de-identified genetic data
Neb. Rev. Stat. § 87-902(6)(b)
In force.
A de-identification rule binding private bodies.
- Obligation class
- Contract terms, Disclosure, Governance
- Audit expectation
- none
What it requires
- To keep genetic data outside the Genetic Information Privacy Act as de-identified data, apply administrative and technical measures to ensure that it cannot be associated with an identifiable consumer (section 87-902(6)(b)(i)).
- Publicly commit to maintain and use the data in de-identified form and not to attempt to reidentify it (section 87-902(6)(b)(ii)).
- Bind every recipient of the data by legally enforceable contractual obligations that prohibit it from attempting to reidentify the data (section 87-902(6)(b)(iii)).
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Section 87-902(6)(b) states the conditions for treating genetic data as de-identified. It states no log or record duty.
- Kind
- None
- As of
What this law does
Under the Genetic Information Privacy Act, genetic data does not include de-identified data.
The Genetic Information Privacy Act treats data as de-identified only if the data cannot reasonably be used to infer information about, or otherwise be linked to, an identifiable consumer, and is subject to administrative and technical measures against association with an identifiable consumer, the company's public commitment not to reidentify it, and legally enforceable contractual obligations that prohibit recipients from attempting to reidentify it. The Nebraska Legislature's statute page gives Laws 2024, LB308, section 2, as the source of section 87-902.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .