The Nebraska Data Privacy Act (NDPA) is a U.S. state privacy law that came into effect on January 1, 2025. It is part of the growing framework of state-level privacy laws regulating how organizations collect and use personal data.
The NDPA is notable for its broad applicability and requirements around consent for sensitive data.
Who does the NDPA apply to?
The NDPA applies to organizations that conduct business in Nebraska or target Nebraska residents and process or sell personal data.
Unlike many other U.S. state privacy laws, the NDPA does not rely on strict data volume or revenue thresholds, which means it can apply to a wider range of small and midsized businesses.
What data is covered?
The law applies to personal data that is linked or reasonably linkable to an identifiable individual.
Additional requirements apply to sensitive personal data, such as health data, biometric data, precise geolocation, and data related to sexual orientation or gender identity. Processing of such data requires prior, explicit consent.
Consumer rights
Under the NDPA, Nebraska residents have the right to access, correct, and delete their personal data, as well as to obtain a copy of that data and to opt out of certain types of processing.
These include the right to opt out of the sale of personal data, targeted advertising, and profiling.
Organizations are required to respond to such requests within a defined timeframe.
What does this mean for your consent setup?
To support the requirements of the NDPA, a consent solution should enable users to opt out of data sale, targeted advertising, and profiling. It should collect explicit consent before processing sensitive data, and support browser-based opt-out signals such as Global Privacy Control where applicable.
How Cookiebot supports NDPA
Cookiebot provides a dedicated NDPA template within the Web Consent Management Platform. This template supports the implementation of consent mechanisms aligned with the requirements of the law, including opt-out rights and explicit consent for sensitive data.
Getting started
To use the NDPA template, create a new configuration, select the NDPA template, adjust the settings as needed, and publish your configuration.
This article is for informational purposes only and does not constitute legal advice.
Comments
0 comments
Please sign in to leave a comment.