United States of America: Governor of Nebraska signed Age-Appropriate Online Design Code Act, including data protection regulation

On 14 April 2026, the Bill amending the Age-Appropriate Online Design Code Act was signed by the Governor of Nebraska. The Act gives minors under 18 control over how they interact with covered online services and sets rules on how those services may collect and handle minors' personal data. The Bill broadens the previous applicability threshold, which had required companies to satisfy five cumulative criteria, including deriving at least 50% of annual revenue from selling or sharing personal data. Under the amended Bill, the provisions apply to any company that conducts business in Nebraska, generates a majority of its annual revenue from online services, determines the purposes and means of processing consumers' personal data, and either exceeds USD 25 million in annual gross revenue or annually processes the personal data of 50,000 or more consumers, households, or devices. The Bill imposes data minimisation and retention limits tied to the specific service elements a covered minor has knowingly engaged with, prohibits targeted advertising and unsolicited profiling of covered minors, requires deletion of any personal data collected solely for age verification, and mandates visible signals whenever precise geolocation data is being collected or used. It also requires that all privacy protections must be set by default at the highest level available, covered online services may not prompt minors to weaken their privacy settings, and minors must be provided with a tool to request account deletion honoured within 15 days.