Does Nebraska Conversational Artificial Intelligence Safety Act (LB 525) require Data Governance?
Nebraska • enacted
Yes — 1 provision
Requirements at a glance
This regulation imposes 3 specific requirements for Data Governance across 1 provision:
- Tools for minor account holders — Offer tools for minor account holders to manage their privacy and account settings (sec. 14(5))
- Parental tools under thirteen — Where the minor account holder is younger than thirteen, offer those same management tools to the account holder's parents or guardians (sec. 14(5))
- Related tools for thirteen and older — Offer related tools to the parents or guardians of minor account holders thirteen years of age and older, as appropriate based on relevant risks (sec. 14(5))
Minor Privacy and Parental Control Tools #
Nebraska is the only one of the 2026 state chatbot statutes to impose an affirmative account-controls duty, and it splits at age thirteen: parents of under-13 account holders get the tools as of right, while parents of 13-and-older account holders get "related tools" only "as appropriate based on relevant risks" — a risk-calibrated standard the act leaves to the operator to apply.
Requirements
| Requirement | Details |
|---|---|
| Tools for minor account holders | Offer tools for minor account holders to manage their privacy and account settings (sec. 14(5)) |
| Parental tools under thirteen | Where the minor account holder is younger than thirteen, offer those same management tools to the account holder's parents or guardians (sec. 14(5)) |
| Related tools for thirteen and older | Offer related tools to the parents or guardians of minor account holders thirteen years of age and older, as appropriate based on relevant risks (sec. 14(5)) |
Penalties
| Violation | Fine |
|---|---|
| Attorney General enforcement | The Attorney General may enforce the act and may bring a civil action for appropriate relief against an operator, on behalf of the State of Nebraska or on behalf of any person aggrieved by a violation (sec. 18(1), sec. 18(2)(a)) |
| Relief available | Preliminary and other equitable or declaratory relief; an award of actual damages; reasonable expenses of bringing the action including court costs, reasonable attorney's fees, investigative costs, witness fees, and deposition costs (sec. 18(2)(b)(i), (ii), (iv)) |
| Civil penalties | At least $1,000 per violation, but no more than $500,000 per operator; penalties recovered are remitted to the State Treasurer under Article VII, section 5 of the Nebraska Constitution (sec. 18(2)(b)(iii)) |
| Private right of action | None — nothing in the act shall be interpreted as creating a private right of action (sec. 18(3)) |
| Developer carve-out | The act creates no liability for the developer of an AI model for a violation by a conversational AI system developed by a third-party operator to provide a service for that developer (sec. 18(4)) |