Nebraska passed a bill amending the Financial Data Protection and Consumer Notification of Data Security Breach Act (Act). Under the bill, a person that is required to provide notice of a security breach to Nebraska residents must also provide notice of the security breach to the Attorney General no later than the time notice is provided to the resident. The bill also expands the definition of “personal information” under the Act to include user name or email address, in combination with a password or security question and answer, that would permit access to an online account. The bill becomes effective July 20, 2016.
See Nebraska Legislature website for the full text of the Statutes:
http://nebraskalegislature.gov/FloorDocs/Current/PDF/Slip/LB835.pdf
