Employer Access to Employee Personal Social Media Accounts in Nebraska
Not sure how this applies to you? Ask about your own facts and see which parts of current Nebraska law apply, with citations to the statutes.
Free for 7 days, then $249/mo. Cancel anytime.
At a glance
| Governing law and covered accounts | Workplace Privacy Act, Neb. Rev. Stat. §§ 48-3501–3511; a personal Internet account requires login information and excludes employer/school supplied or paid accounts and exclusively employer-business accounts, subject to the paid-enhancement carveout (§ 48-3502(6)). |
|---|---|
| Covered employers, employees, and applicants | Public and nonpublic employers, their agents, current employees, and job applicants are covered (§ 48-3502(2), (4)–(5)). |
| Credential and observed-access demands | Employer may not request or require credentials or related access information, or require/request a login in its presence that lets it observe contents or gain access (§ 48-3503(1)–(2)). |
| Contact and privacy-setting demands | Employer may not require adding anyone to account contacts or require/coerce a settings change affecting others' ability to view content (§ 48-3503(3)). |
| Refusal, retaliation, and hiring | No adverse action, refusal to hire, or other penalty for declining a prohibited demand; no required waiver; no retaliation/discrimination for filing or participating in an Act complaint (§§ 48-3503(4), 48-3504–3505). |
| Investigation and specific-content route | Employer may investigate or require employee cooperation on specific information of potentially wrongful account activity or unauthorized transfer of specified employer data; § 48-3507(6) does not itself authorize a general credential demand. |
| Employer accounts, public content, and regulated work | Employer equipment/business accounts, lawful monitoring/policies, public information, legal or self-regulatory screening, law-enforcement investigation, and specified law-enforcement employment screening remain within §§ 48-3507–3508. |
| Inadvertently received credentials and use | Accidental discovery through lawful service/security monitoring excuses receipt, but employer may not use or share credentials and must delete them as soon as practicable (§ 48-3510). |
| Enforcement and remedies | Aggrieved employee/applicant may sue in county-of-violation district court within one year of violation or discovery, whichever later; successful complainant may receive injunction, general/special damages, fees, and costs (§ 48-3511). |
Requirements one by one
Personal accounts and demands
Neb. Rev. Stat. § 48-3502(6) covers an individual online account requiring login information. The employer or school supplied and exclusively employer business account exclusions have a carveout: paying only for added features does not remove an otherwise personal account from the definition. Under § 48-3503, the employer cannot request account credentials or an observed login, force a contact or visibility change, or penalize refusal.
Investigation and retained employer rights
Section 48-3507(6) preserves an investigation or required employee cooperation when the employer has specific information of potentially wrongful account activity or an unauthorized transfer of identified employer information. Neb. Rev. Stat. § 48-3507(1) also preserves lawful policies, while later clauses preserve monitoring on employer equipment, access to public information, and duties imposed by law or a self-regulatory organization.
Civil action
Under § 48-3511, an aggrieved employee or applicant may sue in the district court of the county of the alleged violation within one year after the violation or its discovery, whichever is later. A successful complainant may receive an injunction, general or special damages, reasonable attorney's fees, and costs.
What trips people up
- An investigation is a narrow route. Section 48-3507(6) requires specific information and preserves cooperation in an investigation; it does not itself turn every investigation into permission to demand the login credentials barred by § 48-3503(1).
- Accidentally captured credentials must be deleted. Section 48-3510 excuses receipt through specified lawful service or security monitoring, but bars use or sharing and requires deletion as soon as practicable.
- A waiver does not remove protection. Section 48-3504 makes an agreement to waive a Workplace Privacy Act right void and unenforceable.
Common questions
Does the law cover an applicant as well as a current employee? Yes. Neb. Rev. Stat. § 48-3502(2) defines applicants, subsection (4) defines employees, and § 48-3503 addresses each.
Can a law enforcement agency screen applicants? Section 48-3508 preserves law enforcement screening in connection with its employment applications and officer-conduct investigations.
Is complaint participation protected? Yes. Section 48-3505 prohibits retaliation or discrimination for filing an Act complaint or participating in a proceeding over an alleged violation.
Statutes and sources
- Neb. Rev. Stat. § 48-3502: definitions; accessed 2026-10-17.
- Neb. Rev. Stat. § 48-3503: prohibited demands and refusal protection; accessed 2026-10-17.
- Neb. Rev. Stat. § 48-3504 and § 48-3505: waiver and complaint retaliation; accessed 2026-10-17.
- Neb. Rev. Stat. § 48-3507 and § 48-3508: employer rights and law enforcement; accessed 2026-10-17.
- Neb. Rev. Stat. § 48-3510 and § 48-3511: inadvertent credentials and civil action; accessed 2026-10-17.
Source links
Every statute quoted above, linked, with the date we checked it.
What does Nebraska law mean for your facts?
You just read the general rule. Ask your own question and see which parts of current Nebraska law apply to your situation, with citations you can check.
Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.
- Starts from the statutes this survey is built on
- Cites every source it relies on, so you can verify it
- Chat, drafting and research in one workspace