Search statutes, citations, and provisions

Provision text match · United States — Nebraska · en

§ 87-1116. Data protection assessment; requirements; confidentiality.

§ 87-1116. Data protection assessment; requirements; confidentiality.

(1) A controller shall conduct and document a data protection assessment of each of the following processing activities involving personal data: (a) The processing of personal data for purposes of targeted advertising; (b) The sale of personal data; (c) The processing of personal data for purposes of profiling, if the profiling presents a reasonably foreseea

Topics: assessment, confidentiality, consumer privacy

Provision text match · United States — Nebraska · en

§ 87-1402. Legislative findings.

§ 87-1402. Legislative findings.

The Legislature finds that agricultural data is a proprietary business asset that originates from the farm, land, devices, and equipment of agricultural producers. To protect the economic value of this data and the autonomy of Nebraska producers, the sale of such data shall be protected and the security of such data shall be maintained through reasonable saf

Topics: agricultural data, data security

Provision text match · United States — Nebraska · en

§ 60-3209. Data not considered public record; protection orders; effect.

§ 60-3209. Data not considered public record; protection orders; effect.

(1) Captured plate data held by a governmental entity is not considered a public record for purposes of sections 84-712 to 84-712.09 and shall only be disclosed to the person to whom the vehicle is registered or with the prior written consent of the person to whom the vehicle is registered or pursuant to a disclosure order under subsection (2) of section 60-

Topics: data disclosure, vehicle registration data

Provision text match · United States — Nebraska · en

§ 87-1407. Controller or processor; security practices.

§ 87-1407. Controller or processor; security practices.

(1) Any controller or processor in custody or possession of agricultural data shall establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of such agricultural data. (2) Such security practices shall be appropriate for the volume and nature of

Topics: agricultural data, data security

Provision text match · United States — Nebraska · en

§ 87-1121. Attorney General; powers.

§ 87-1121. Attorney General; powers.

If the Attorney General has reasonable cause to believe that a controller or processor has engaged in or is engaging in a violation of the Data Privacy Act, the Attorney General may issue a civil investigative demand pursuant to section 87-1123. (2) The Attorney General may request, pursuant to a civil investigative demand, that a controller disclose any da

Topics: data protection assessments, investigative demands

Provision text match · United States — Nebraska · en

§ 87-1106. Federal Children's Online Privacy Protection Act of 1998; compliance; effect.

§ 87-1106. Federal Children's Online Privacy Protection Act of 1998; compliance; effect.

A controller or processor that complies with the verifiable parental consent requirements of the federal Children's Online Privacy Protection Act of 1998, 15 U.S.C. 6501 et seq., and the rules, regulations, and guidance adopted and promulgated under such act as such act, rules, regulations, and guidance existed on January 1, 2024, with respect to data collec

Topics: online data collection, parental consent

Provision text match · United States — Nebraska · en

§ 87-801. Act, how cited.

§ 87-801. Act, how cited.

Sections 87-801 to 87-808 shall be known and may be cited as the Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006. History: Laws 2006, LB 876, § 1; Laws 2018, LB757, § 6.

Topics: data-digital

Provision text match · United States — Nebraska · en

§ 71-8249. Statewide trauma registry; data; confidentiality.

§ 71-8249. Statewide trauma registry; data; confidentiality.

(1) All data collected under section 71-8248 shall be held confidential pursuant to sections 81-663 to 81-675. Confidential patient medical record data shall only be released as (a) Class I, II, or IV medical records under sections 81-663 to 81-675, (b) aggregate or case-specific data to the regional trauma system quality assurance program and the regional t

Topics: data handling, medical records, patient information

Provision text match · United States — Nebraska · en

§ 87-1112. Controller; personal data; requirements on collection and use.

§ 87-1112. Controller; personal data; requirements on collection and use.

(1) A controller: (a) Shall limit the collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which that personal data is processed, as disclosed to the consumer; and (b) For purposes of protecting the confidentiality, integrity, and accessibility of personal data, shall establish, implement, and ma

Topics: consent, consumer privacy, data security, discrimination

Provision text match · United States — Nebraska · en

§ 87-1104. Information and records to which act is not applicable.

§ 87-1104. Information and records to which act is not applicable.

The Data Privacy Act does not apply to the following: (1) Protected health information under the Health Insurance Portability and Accountability Act; (2) Health records; (3) Patient identifying information for purposes of 42 U.S.C. 290dd-2, as such section existed on January 1, 2024; (4) Identifiable private information: (a) For purposes of the federal polic

Topics: consumer data, employment data, health information

Provision text match · United States — Nebraska · en

§ 87-808. Security procedures and practices; disclosure of computerized data; contract provisions; compliance.

§ 87-808. Security procedures and practices; disclosure of computerized data; contract provisions; compliance.

ation, or disclosure, an individual or a commercial entity that conducts business in Nebraska and owns, licenses, or maintains computerized data that includes personal information about a resident of Nebraska shall implement and maintain reasonable security procedures and practices that are appropriate to the nature and sensitivity of the personal informatio

Topics: personal information security, third-party service provider contracts

Provision text match · United States — Nebraska · en

§ 87-903. Direct-to-consumer genetic testing company; duties; prohibited acts; Attorney General; powers; civil penalty.

§ 87-903. Direct-to-consumer genetic testing company; duties; prohibited acts; Attorney General; powers; civil penalty.

(1) In order to safeguard the privacy, confidentiality, security, and integrity of a consumer's genetic data, a direct-to-consumer genetic testing company shall: (a) Provide clear and complete information regarding the company's policies and procedures for collection, use, or disclosure of genetic data by making available to a consumer: (i) A high-level priv

Topics: consent, disclosure restrictions, genetic data handling, security

Provision text match · United States — Nebraska · en

§ 87-902. Terms, defined.

§ 87-902. Terms, defined.

an entity that (a) offers consumer genetic testing products or services directly to a consumer, or (b) collects, uses, or analyzes genetic data that resulted from a direct-to-consumer genetic testing product or service and was provided to the company by a consumer. Direct-to-consumer genetic testing company does not include any entity that is solely engaged

Topics: consumer testing, definitions, genetic data

Provision text match · United States — Nebraska · en

§ 87-1303. Act; applicability.

§ 87-1303. Act; applicability.

Code Act does not apply to: (a) A federal, state, tribal, or local government entity in the ordinary course of its operations; (b) Personal data subject to a statute or regulation that is controlled by a covered online service that is required to comply with: (i) Title V of the federal Gramm-Leach-Bliley Act; (ii) The federal Health Information Technology fo

Provision text match · United States — Nebraska · en

§ 38-1225. Patient data; confidentiality; immunity.

§ 38-1225. Patient data; confidentiality; immunity.

(1) No patient data received or recorded by an emergency medical service or an emergency care provider shall be divulged, made public, or released by an emergency medical service or an emergency care provider, except that patient data may be released (a) for purposes of treatment, payment, and other health care operations as defined and permitted under the f

Topics: data sharing, patient data handling, research access

Provision text match · United States — Nebraska · en

§ 87-1305. Covered online service; personal data; collection and use.

§ 87-1305. Covered online service; personal data; collection and use.

(1) A covered online service shall only collect and use the minimum amount of a covered minor's personal data necessary to provide the specific elements of an online service with which the covered minor has knowingly engaged. Such personal data shall not be used for reasons other than those for which it was collected. (2) A covered online service shall not b

Topics: age verification, content restrictions, data handling

Provision text match · United States — Nebraska · en

§ 87-904. Act; not applicable; when.

§ 87-904. Act; not applicable; when.

ollected by a covered entity or business associate as those terms are defined in 45 C.F.R. parts 160 and 164. (2) The disclosure of genetic data pursuant to the Genetic Information Privacy Act shall comply with all state and federal laws for the protection of privacy and security. The act shall not apply to protected health information collected by a covered

Topics: data privacy, genetic data, health information

Provision text match · United States — Nebraska · en

§ 71-2078. Injury data; legislative findings.

§ 71-2078. Injury data; legislative findings.

tal concern to the health of the residents of the State of Nebraska. The Legislature further finds that the availability of reliable injury data is necessary in order to provide for the protection and promotion of the health of the residents of the state. It is the intent of the Legislature to assist in and encourage injury prevention by requiring that speci

Topics: health data, injury prevention

Provision text match · United States — Nebraska · en

§ 2-407. Purposes of act.

§ 2-407. Purposes of act.

technical information, and (6) provide observational proof of healthy soil benefits through access to demonstration and research farms and data. History: Laws 2022, LB925, § 3.

Topics: agricultural production, soil management, water quality

Provision text match · United States — Nebraska · en

§ 87-1126. Act, how construed.

§ 87-1126. Act, how construed.

The Data Privacy Act shall not be construed to: (1) Restrict a controller's or processor's ability to: (a) Comply with federal, state, or local laws, rules, or regulations; (b) Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities; (c) Cooperate with any law enfor

Topics: consumer privacy, personal data processing, research governance