On February 23, 2018, Nebraska passed Legislative Bill 757 amendments to the Credit Report Protection Act and the Financial Data Protection & Consumer Notification of Data Securtiy Breach Act of 2006.  The amendment disallows credit reporting agnecies from charging consumers for placing, temporarilty lifting, or removing security freezes after a data breach.  The amendment also requires Nebraska entitites to

"implement and maintain reasonable security procedures and practices that are appropriate to the nature and sensitivity of the personal information owned, licensed, or maintained."

The measure was in direct response to victims of the Equifax breach where Nebraskans were having to pay out of pocket to freeze their accounts.

The amended bill also defines personal information as an individuals first name/initial and last name in company with 

• SSN
• Drivers license or state ID number
• Credit/Debit card with access code
• Bank routing info
• Biometrics (such as fingerprints, retin/iris image, voice print, etc)
• email address or username with a password or security question/answer