The Data Elimination and Limiting Extensive Tracking and Exchange Act (or the Delete Act) is a proposed bill designed to strengthen data privacy protections for consumers in Nebraska. It introduces new definitions and requirements for data brokers, mandating them to maintain a comprehensive information security program tailored to their size and data handling practices. Data brokers will be required to register annually with the Secretary of State, providing detailed information about their data practices, including security breaches and deletion requests. Violations of these provisions will be classified as deceptive trade practices, and the bill outlines civil penalties for non-compliance, including a $25,000 penalty for initial violations and $1,000 per day for failure to correct incorrect information.

The Delete Act also emphasizes transparency by requiring data brokers to post notices on their websites about their data practices and to ensure that personal data is disclosed only for legitimate purposes. It mandates that data brokers process deletion requests at least every 45 days and undergo audits every three years to ensure compliance. Additionally, the bill requires the Secretary of State to create a deletion mechanism by January 1, 2028, allowing consumers to request the deletion of their personal data. The Attorney General will have the authority to enforce penalties and seek injunctive relief for violations, ultimately aiming to enhance consumer privacy rights and accountability among data brokers in Nebraska.

Statutes affected:
Introduced: 87-302