Nebraska healthcare breach data

Notification deadline

As soon as possible and without unreasonable delay following discovery of the breach of the security of the system, consistent with (i) the legitimate needs of law enforcement under § 87-803(4), and (ii) any measures necessary to determine the scope of the breach and to restore the reasonable integrity of the computerized data system. No numeric outer bound.

State regulator notice

Required

Any individual or commercial entity required to give notice to a Nebraska resident under § 87-803 must also provide notice to the Nebraska Attorney General, not later than the time when notice is provided to the Nebraska resident. There is no numeric threshold — the AG-notice obligation is triggered by any breach requiring individual notice.