Privacy of Insurance Consumer Information Act
Nebraska Insurance Privacy Act
Financial · Health
Nebraska's insurance privacy law implements Gramm-Leach-Bliley Title V for insurance licensees, based on the NAIC model. It requires initial and annual privacy notices, an opt-out before sharing nonpublic personal financial information with nonaffiliated third parties, and written authorization before disclosing nonpublic personal health information, subject to listed insurance-function exceptions.
- Where
- Nebraska
- Citation
- Neb. Rev. Stat. 44-901 to 44-925
- Status
- In force
- Enforced by
- Nebraska Department of Insurance (Director of Insurance)
- People can sue
- No
- Penalties
- Each violation is an unfair trade practice in the business of insurance subject to the Unfair Insurance Trade Practices Act remedies (44-923).
- Applies to
- All licensees of the Nebraska Department of Insurance (insurers, producers, and other licensees) (44-902(1))
- Covers nonpublic personal financial information about individuals obtaining insurance for personal, family, or household purposes, and all nonpublic personal health information (44-902(2))
What a privacy notice must say
- Provide a clear and conspicuous initial privacy notice to customers when the relationship begins, and to consumers before disclosing their financial information to nonaffiliated third parties outside the exceptions.Neb. Rev. Stat. 44-904
- Provide annual privacy notices to customers and revised notices when practices change.Neb. Rev. Stat. 44-905; 44-908
Rights it gives people
- Consumers may opt out of disclosure of nonpublic personal financial information to nonaffiliated third parties; licensees must give an opt-out notice, reasonable means (such as a toll-free number or reply form), and a reasonable opportunity (for example, 30 days) before disclosing.Neb. Rev. Stat. 44-907; 44-910
Practices it requires
- Do not disclose nonpublic personal health information without the individual's authorization, except for listed insurance functions such as claims, underwriting, fraud detection, and research.Neb. Rev. Stat. 44-916
- Limit redisclosure and reuse of financial information received from other institutions.Neb. Rev. Stat. 44-911
- Do not unfairly discriminate against consumers who opt out or decline to authorize health information disclosure.Neb. Rev. Stat. 44-922
Sources
- Official text
- Neb. Rev. Stat. 44-901 (Nebraska Legislature)
- Neb. Rev. Stat. 44-902 (Nebraska Legislature)
- Neb. Rev. Stat. 44-910 (Nebraska Legislature)
- Neb. Rev. Stat. 44-916 (Nebraska Legislature)
- Neb. Rev. Stat. 44-923 (Nebraska Legislature)
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: effective_date null: enacted by Laws 2001, LB 52; compliance dates in 44-925 reference July 1, 2001, and health authorization in 44-916 applies on and after January 1, 2003; the act's formal effective date was not confirmed. | 44-905, 44-908, and 44-911 were cited from the chapter index titles; their full text was not fetched. | Nebraska does not appear to have enacted the NAIC Insurance Data Security Model Law; no such act was found in the Chapter 44 index.
Research reference, not legal advice.