What does Nebraska require right now?

Requires online services directed at minors or likely accessed by minors to implement default privacy settings (most private by default), minimize data collection, disable sharing and profiling features for minor accounts, and conduct age estimation. A covered service is exempt if it has actual knowledge that fewer than 2% of its users are minors; data collected for that determination must be deleted.

Comprehensive privacy law covering personal data processing. Applies to entities processing data of 100,000+ Nebraska consumers or 25,000+ with 25%+ of revenue from data sales. Consumer rights: access, correction, deletion, portability, opt-out (targeted advertising, sale, significant-effect profiling). Opt-in consent required for sensitive data. AG enforcement with 30-day cure; $7,500 per violation.