Nebraska Breach Law Amendment Effective Today

As we previously reported, Nebraska’s breach law was amended earlier this year and the effective date for that amendment is today (July 20, 2016). As amended, the law now requires companies that have suffered a breach impacting individuals in the state to notify the Nebraska Attorney General. This notice must be made “no later” than notice to impacted individuals. The amendment also clarifies that information is not to be considered encrypted if the encryption key was compromised, and adds to the definition of personal information which, if breached, requires notification and username/email address for online account along with the password.

TIP: Companies that maintain nationwide incident response plans should check their plan and ensure that they have addressed the Nebraska amendments.