Nebraska Data Privacy Act (NDPA) Awareness Course
Nebraska takes a unique approach to privacy law - like Texas, it has no numeric thresholds for the number of consumers processed. The Nebraska Data Privacy Act (NDPA), effective January 1, 2025, means any business that doesn't qualify for the small business exemption may be subject to compliance obligations.
This course gives your team practical guidance on the Nebraska Data Privacy Act. We cover the critical small business exemption, the rights Nebraska consumers have over their data, sensitive data requirements, and the enforcement landscape with penalties up to $7,500 per violation.
The NDPA includes a permanent 30-day cure period that never sunsets - more business-friendly than states where the cure period expires. Understanding whether your organisation qualifies for the small business exemption is the first step in compliance. No technical background required - just focused, practical training your team can apply immediately.
Why learn about the NDPA?
- Understand the no-threshold approach - the small business exemption is key
- Determine if your organisation qualifies for the small business exemption
- Know when opt-in consent is required for sensitive data
- Handle consumer data requests correctly within the 45-day timeline
- Avoid penalties of up to $7,500 per violation
Course features
Nebraska-specific
Focused entirely on the NDPA with Nebraska-specific requirements, including the unique no-threshold approach.
Practical scenarios
Real-world examples and case studies showing how the NDPA applies in everyday business situations.
Up to date content
Based on the enacted 2024 legislation covering the January 2025 effective date requirements.
Official sources
Built from Nebraska Revised Statutes and official guidance, with references to authoritative documentation.
Learning with us
Course information
Learning outcomes
- Understand when and how the NDPA applies to your organisation
- Determine if you qualify for the small business exemption
- Know the rights Nebraska residents have over their personal data
- Recognise sensitive data and understand the opt-in consent requirement
- Handle consumer data requests correctly within required timeframes
- Understand enforcement and the permanent cure period
Training recommendations
- All employees who handle customer data should complete this training - the law is already effective as of January 2025.
- Annual refresher training is recommended to stay current with enforcement trends.
- Teams handling sensitive data or consumer requests may benefit from additional role-specific training.
This course is recommended for
Employees who handle customer data at organisations that conduct business in Nebraska or target Nebraska residents. This includes marketing, sales, customer service, HR, IT, and compliance teams - particularly at organisations that don't qualify for the small business exemption.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).
Course content
In this section we introduce the Nebraska Data Privacy Act and explain its unique approach with no numeric thresholds - making the small business exemption critical to understand.
Lessons
- Introduction to the NDPA
- When the law takes effect (January 1, 2025)
- No numeric thresholds - why this matters
- The small business exemption explained
- Key definitions explained
Nebraska residents have specific rights over their personal data. In this section we cover what those rights are, how to recognise a valid request, and what your obligations are when you receive one.
Lessons
- The right to confirm and access
- The right to correct inaccurate data
- The right to delete personal data
- The right to data portability
- The right to opt out of sales and targeted advertising
- Responding to consumer requests (45-day timeline)
The NDPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data under Nebraska law and how to handle it correctly.
Lessons
- What is sensitive data under NDPA?
- The opt-in consent requirement
- Children's data and parental consent
- Practical consent implementation
This section covers the operational requirements of the NDPA including data minimisation, purpose limitation, security obligations, and working with third-party processors.
Lessons
- Data minimisation and purpose limitation
- Security requirements
- Data protection assessments
- Processor contract requirements
Learn what information must be included in your privacy notice under the NDPA and how to communicate clearly with Nebraska consumers.
Lessons
- Required privacy notice contents
- Disclosure of data sales
- Third-party sharing disclosures
- Updating your privacy policy
Understand the enforcement landscape, the permanent 30-day cure period, and what penalties look like under the NDPA.
Lessons
- Attorney General enforcement authority
- The permanent 30-day cure period
- Civil penalties up to $7,500 per violation
- No private right of action
- Building a compliance programme
Test your knowledge with scenario-based questions covering all the key NDPA concepts from the course.
Lessons
- Knowledge check (10 questions)
How it works
Get notified
Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the NDPA enforcement develops, we'll update the course. Trainees can review updated materials to stay current with developments.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.
This course is designed for employees who handle customer data at organisations that may be subject to Nebraska's privacy law. This includes marketing, sales, customer service, HR, and IT teams.
The Nebraska Data Privacy Act takes effect on January 1, 2025. Unlike most state privacy laws, it has no numeric thresholds, so the small business exemption is the key factor determining applicability.
Unlike most state privacy laws, NDPA has no numeric thresholds for the number of consumers. Instead, it applies to any business that conducts business in Nebraska or targets Nebraska residents, UNLESS they qualify for the small business exemption as defined by the SBA.
NDPA's most significant difference is the lack of numeric thresholds - similar to Texas. Most state laws require processing data of 100,000+ consumers. In Nebraska, any business that doesn't qualify for the small business exemption may be subject to the law. It also has a permanent 30-day cure period and penalties up to $7,500 per violation.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
The course typically takes 30-35 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.
Get notified when this course launches
Sign up to our newsletter to be the first to know when this course is available.
This course will be included in Measured Collective Plus
Get access to all our courses with one subscription from £236/year.
Learn About MC PlusAvailable courses
PECR & ePrivacy for Marketers
Included in PLUS
Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.
View Course
GDPR Refresher Training Course
Included in PLUS
A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…
View Course
GDPR Essentials Course
Included in PLUS
Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.
View Course