NE LB602

Data brokers must register annually with the Secretary of State by January 31, paying a fee up to $300, and disclose categories of data processed, security breaches, and whether they collect precise geolocation data

Secretary of State must establish an accessible deletion mechanism by January 1, 2028, allowing consumers to submit a single request to delete their personal data from all registered data brokers at no charge

Data brokers must process deletion requests every 45 days beginning August 1, 2028, and undergo compliance audits by independent third parties at least every three years starting December 31, 2030

Data brokers must maintain comprehensive information security programs with administrative, technical, and physical safeguards, including encryption, secure authentication, employee training, and incident response protocols

Civil penalties include $200 per day for failure to register, $1,000 per day for missing registration information, $25,000 for materially incorrect filings, and $200 per day per unprocessed deletion request; violations of security and data verification requirements constitute deceptive trade practices