Nebraska Children's Privacy Laws (2026)

Parental Rights in Social Media Act (LB 383) · LB 383

Enacted — not yet effective — Signed into law; its effective date is still in the future. · Social media · effective 2026-07-01 · binds operators

Ages: Minors under 18

Requires: Social media platforms must verify every user's age via commercially reasonable methods (third-party vendor / digitized ID, with no data retention) and obtain verifiable parental/guardian consent before a minor under 18 may create or hold an account; must give parents tools to view the minor's posts/messages and control privacy, account settings, and time spent.

Litigation: NetChoice v. Hilgers (D. Neb.), pre-enforcement First Amendment challenge: complaint filed May 13-14, 2026; PI motion May 22, 2026; State's opposition June 5, 2026. No preliminary-injunction ruling issued as of 2026-06-27; law not enjoined.

Age-Appropriate Online Design Code Act (LB 504) · LB 504

In force — Effective and enforceable today. · Age assurance · effective 2026-01-01 · binds operators, developers

Ages: Minors under 18 (heightened protections for children under 13)

Requires: Covered online services likely accessed by minors must minimize collection/use of a minor's personal data, default the most protective privacy/safety settings for known children, provide parental control tools (enabled by default for children under 13), offer a chronological-feed option and time-management/limit tools, and restrict targeted advertising and unsolicited communications to minors.

Litigation: No NetChoice or other lawsuit confirmed filed against LB 504 as of 2026-06-27; NetChoice sent a veto-request letter in May 2025 but had not sued as of early 2026. Not enjoined; in effect.

Nebraska Age-Appropriate Online Design Code Act · LB504

In force — Effective and enforceable today. · Design code · effective 2026-01-01 · binds operators

Ages: Covered minors under 18 the service knows to be a minor; 'child' = under 13

Requires: Covered online services must apply privacy-and-safety-by-default at the highest protection for known minors: data minimization (collect/retain only what is needed for the feature the minor knowingly uses), no targeted advertising to a covered minor, no profiling unless necessary for a service the minor actively requested, limits/notice on precise geolocation, time-of-day limits on notifications/push alerts, and a ban on dark patterns and on advertising prohibited products (drugs, tobacco, gambling, alcohol) to covered minors. It also requires opt-out controls over 'covered design features' (infinite scroll, autoplay rewards, etc.) and parental tools enabled by default for known children.

Litigation: Not currently enjoined. NetChoice publicly urged a veto and has raised First Amendment objections, but as of 2026-06-28 has not sued over LB504. NetChoice v. Hilgers (D. Neb., filed May 2026) challenges a separate Nebraska statute — the Parental Rights in Social Media Act (LB383, age-verification/parental-consent) — not the Design Code Act.

Nebraska Data Privacy Act — minors' provisions · LB1074

In force — Effective and enforceable today. · Privacy law (minors) · effective 2025-01-01 · binds operators

Ages: Known children under 13 (no heightened 13-17 teen band)

Requires: Personal data collected from a known child (under 13) is classified as 'sensitive data.' A controller must not process such known-child sensitive data except in accordance with the federal Children's Online Privacy Protection Act (COPPA); complying with COPPA's parental-consent requirements satisfies the Act. The Act adds no separate heightened opt-in or targeted-advertising/profiling regime for teens aged 13-17 — those consumers have only the same opt-out rights as adults.