Go to Other Versions of The Nebraska Rev. Stat.
  1. 2025 Nebraska Rev. Stat. (here)
  2. 2024 Nebraska Rev. Stat.
  3. 2023 Nebraska Rev. Stat.
  4. View All Versions

2025 Nebraska Revised Statutes
Chapter 87 - Trade Practices
87-1201 - Cybersecurity event; liability of private entity.

Universal Citation:
NE Code § 87-1201 (2025)
Learn more This media-neutral citation is based on the American Association of Law Libraries Universal Citation Guide and is not necessarily the official citation.
Previous Next

87-1201. Cybersecurity event; liability of private entity.

(1) For purposes of this section:

(a) Cybersecurity event means an event resulting in unauthorized access to, or disruption or misuse of, an information system or nonpublic information stored on an information system;

(b) Information system means:

(i) A discrete set of electronic information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of electronic nonpublic information; or

(ii) A specialized system, including an industrial or process control system, a telephone switching and private branch exchange system, and an environmental control system;

(c) Nonpublic information means information that is not publicly available and concerns a person that, because of a name, number, personal mark, or other identifier, can be used to identify such person, in combination with the following:

(i) A social security number;

(ii) A driver's license number or state identification card number;

(iii) A financial account number or credit or debit card number;

(iv) A security code, access code, or password that would permit access to such person's financial accounts; or

(v) Any biometric record;

(d) Private entity means a corporation, religious or charitable organization, association, partnership, limited liability company, limited liability partnership, or other private business entity, whether organized for-profit or not-for-profit; and

(e) Publicly available information means information that is lawfully made available through federal, state, or local government records or information that a private entity has a reasonable basis to believe is lawfully made available to the general public.

(2) A private entity shall not be liable in a class action resulting from a cybersecurity event unless the cybersecurity event was caused by willful, wanton, or gross negligence on the part of the private entity.

Source

  • Laws 2025, LB241, ยง 1.
  • Effective Date: September 3, 2025

Previous Next
Disclaimer: These codes may not be the most recent version. Nebraska may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.