Nebraska · verified through August 25, 2026

Nebraska: law status and evidence context.

Law status, direct attached-library attribution, and public enforcement context are shown separately. A zero direct total does not mean no enforcement exists.

NE · 6 requirements mapped / control outcomes supported

Law status

Verified comprehensive law

Yes - Nebraska Data Privacy Act

Official name / citation
Neb. Rev. Stat. §§ 87-1101 to 87-1130
Status / effective date
Codified in the Nebraska Revised Statutes
Principal enforcer
Nebraska Attorney General

Direct attached-library attribution

0 cases · $0

These totals are assigned solely by the attachment’s state heading. Shared multistate totals are not allocated in full to every state.

The attached library does not enumerate participant-level allocations for every multistate matter; shared settlement totals are presented once at the national level and are not duplicated into state totals.

Official law sources

Other generally applicable PII law

Also: Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006, Neb. Rev. Stat. §§ 87-802, 87-803 - https://nebraskalegislature.gov/laws/statutes.php?statute=87-803

Public enforcement context

Tier 1

Sabre Corporation (Sabre Hospitality Solutions)

$2.4 million total; Nebraska share stated as $43,006 · n.a. (date not stated on page)

Nebraska joined a 27-state settlement over a breach of Sabre's hotel reservation system.

Legal basis: State consumer protection and breach-notification laws

Official case source (opens in a new tab)

Mapped control outcomes

1 personal data inventory/data map; 2 sensitive-data discovery; 3 downstream copy tracking; 8 breach blast-radius analysis; 9 retention/minimization; 10 regulator audit evidence

Kestryl can evidence where regulated personal data actually resides across structured stores and unstructured attachments/images, produce audit rows and evidence packs showing when each location was discovered and reviewed, and apply structured-data remediation modes (mask, vault, strip) to reduce exposure. It does not alter source attachments or documents, and its output is technical evidence supporting controls, not proof of legal compliance.