Law note · Nebraska
Nebraska Data Privacy Act, Attorney General enforcement
cite Neb. Rev. Stat. §§ 87-1119, 87-1122, 87-1124, 87-1125
stage IN FORCE in force since 2025-01-01
reviewed 2026-08-27
The Nebraska Attorney General has exclusive authority to enforce NDPA. Before bringing an action, the Attorney General must give a controller or processor 30 days' written notice identifying the specific provisions violated; no sunset date for this cure right appears in the text read, unlike Connecticut's and Delaware's time-limited cure windows or Montana's eliminated one. Civil penalties run up to $7,500 per violation, and the Act creates no private right of action.
What it asks of an app
- Expect NDPA violations to be enforced exclusively by the Nebraska Attorney General, never by a private plaintiff.
- Cure an identified violation and provide the required written statement within 30 days of Attorney General notice to avoid an enforcement action.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Nebraska statute text, Neb. Rev. Stat. §§ 87-1119, 87-1122, 87-1124, 87-1125