United States of America: Adopted Data Privacy Act (LB 1074) including data protection regulation

On 11 April 2024, the Legislature of Nebraska adopted the Data Privacy Act (LB 1074). The Data Privacy Act includes sections 1 to 30 of the LB 1074. This Act introduces data handling and consumer protection measures across various sectors, including requirements regarding data minimisation and retention. Furthermore, the Act establishes consumer rights to access, correct, delete and portability of their personal data, as well as the right to opt out of data processing for targeted advertising or the sale of their data. In addition, the Act aims to enhance the security of financial transactions and personal data management within Nebraska, aligning with both local and federal compliance requirements. In accordance with the provisions of LB 1074, entities that fail to comply with the new regulations may be subject to penalties. The Act assigns enforcement authority to the Attorney General.