Lexology April 30, 2024
On April 12, 2024, the Nebraska legislature passed the Data Privacy Act (NEDPA), scheduled to take effect on January 1, 2025. NEDPA defines consumer rights, sets obligations for data controllers and processors, and assigns enforcement authority to the Nebraska Attorney General.
NEDPA targets businesses operating in Nebraska or serving Nebraskans, which process or sell personal data. NEDPA excludes those classified as small businesses under the federal Small Business Act. NEDPA also exempts state agencies, financial institutions governed by the Gramm-Leach-Bliley Act, entities subject to HIPAA, non-profits, educational institutions, and public utilities that manage electricity and natural gas.
NEDPA gives Nebraskans a suite of consumer rights. These include the right to confirm and access their personal data, correct inaccuracies, delete personal...
Today's Sponsors
Today's Sponsor