Skip to main content
NBDPA · Effective 2025-01-01

Nebraska Data Removal Guide (2026)

Nebraska's Data Privacy Act took effect January 2025. The NBDPA uses a non-small-business and processing-or-sale test rather than consumer-count thresholds, so a provider's product or service connection, status, and exemptions need to be checked directly.

Research status: published state guide pending fresh official-source re-verification.

This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated August 13, 2026

At a glance

Comprehensive state privacy law
Recorded: NBDPA
Broker response deadline
45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
Enforcement
Nebraska Attorney General

Nebraska Data Privacy Act (NBDPA)

NBDPA applies to a person doing business in Nebraska or producing a product or service consumed by Nebraska residents that processes or sells personal data and is not a small business under the federal Small Business Act, subject to statutory exclusions. Small businesses remain subject to the separate sensitive-data sale-consent rule. Rights include access, correction, deletion, portability, and opt-outs from targeted advertising, sale, and certain profiling. Controllers generally have 45 days to respond, with a possible 45-day extension, and appeals are decided within 60 days. The Attorney General has exclusive enforcement authority, with a 30-day written notice-and-cure process and civil penalties up to $7,500 per violation; there is no private right of action.

Read the full NBDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.

What rights do Nebraska residents have?

  • Access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling
  • No consumer-count thresholds; product/service, non-small-business, processing/sale, and exemption tests still apply
  • AG exclusive enforcement; no private right of action

Where does your data leak from in Nebraska?

The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Nebraska:

  • JUSTICE (Nebraska Judicial Branch) case search
  • Douglas, Lancaster County property records
  • Nebraska DMV records

Generate requests in under 60 seconds

Generate requests for 1009 US/global broker workflows for $9

OfflistMe prepares user-reviewed request drafts for the selected catalog routes. You choose the jurisdictional wording, review each draft, and send or submit it yourself; broker verification and outcomes remain outside OfflistMe's control.

What if a broker ignores your request?

If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Nebraska Attorney General complaint route. The authority's jurisdiction and available remedies vary.

File a complaint with Nebraska Attorney General

FAQ: Nebraska data removal

How does Nebraska's NBDPA scope work?+

The NBDPA does not use a consumer-count threshold. It generally applies when a person does business in Nebraska or produces a product or service consumed by Nebraska residents, processes or sells personal data, and is not a small business under the statutory federal definition, subject to exclusions. A small business still may not sell sensitive data without prior consumer consent under § 87-1118.

Related resources

Other state guides