DPO SchoolDPO School

Nebraska Data Privacy Act

Nebraska privacy law (NDPA): applicability

Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026

Summary (not the statute text)

Nebraska uses no numeric threshold. The Act applies to any person that does business in Nebraska or produces a product or service consumed by its residents, processes or sells personal data, and is not a small business under the federal Small Business Act (the same approach as Texas). Small businesses remain bound by one rule: they may not sell sensitive data without prior consent. State agencies, GLBA financial institutions and affiliates, HIPAA covered entities and business associates, nonprofits, institutions of higher education and certain utilities are excluded at entity level, and many data types are exempt, including employment-context data.

Key points

  1. Applies to any person doing business in Nebraska or producing products or services consumed by residents, that processes or sells personal data, and that is not a small business under the federal Small Business Act as it stood on 1 January 2024.

    Section: § 87-1103(1)

  2. Small businesses must still obtain prior consent before selling sensitive data, under the same penalty.

    Section: § 87-1118

  3. Excluded entities: state agencies and political subdivisions; financial institutions, affiliates or data subject to GLBA Title V; HIPAA covered entities and business associates; nonprofits; institutions of higher education; electric suppliers and certain natural gas utilities.

    Section: § 87-1103(2)

  4. Exempt data includes protected health information, health records, limited data sets, FCRA, DPPA, FERPA and Farm Credit Act data, and data about job applicants, employees, agents and contractors used in that role.

    Section: § 87-1104

  5. A consumer is a Nebraska resident acting only in an individual or household context, not in a commercial or employment context.

    Section: § 87-1102(7)

  6. The Act preempts local ordinances and rules on processing personal data.

    Section: § 87-1130

Sources

Compare applicability across all states

Law as of October 28, 2026.

Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.

Official text of the Nebraska statute

Reference material, not legal advice.