Nebraska Data Privacy Act
Opt-Out Rights

Nebraska Data Privacy Act NDPA-3: Opt-Out Rights for Targeted Advertising, Sale, and Profiling

Provide consumer opt-out rights for: (a) processing personal data for targeted advertising, (b) sale of personal data (defined more narrowly than CCPA - exchange of personal data for monetary consideration), (c) profiling in furtherance of decisions that produce legal or similarly significant effects. NDPA does NOT require Universal Opt-Out Mechanism (UOOM) recognition (unlike Colorado/Connecticut/Texas) but controllers may voluntarily honour GPC + ADPPA signals. Maintain a clear and conspicuous opt-out method including a prominent link to a privacy choices page.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 14 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Nigeria Data Protection Act 2023 (NDPA) · 7 controls

  • NG-NDPA-1 Scope, Applicability, and Establishment of Nigeria Data Protection Commission
  • NG-NDPA-2 Lawful Basis, Consent, and Data Protection Principles
  • NG-NDPA-4 Data Subject Rights and Automated Decision-Making
  • NG-NDPA-5 Security of Processing, Breach Notification, and DPIA
  • NG-NDPA-6 Data Protection Officer, DPCO, and Processor Agreements
  • NG-NDPA-7 Cross-Border Data Transfers and International Cooperation
  • NG-NDPA-8 Enforcement, Penalties, Data Controllers of Major Importance (DCMI), and Compliance

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 14 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Nebraska Data Privacy Act controls