AI Frontier Institute

Adopt the Agricultural Data Privacy Act and the Conversational Artificial Intelligence Safety Act

View primary source →

LB525 was approved by the Governor on April 14, 2026, and is law. It creates two acts and adds a public records exception. Agricultural Data Privacy Act (Sections 1 to 10). Section 4 makes the agricultural producer the owner of agricultural data that originates from its farm, land, device, or equipment, and gives it control of that data. Controllers and processors get only a nonexclusive right of control to provide services, maintain equipment, or do processing the producer authorizes. That right does not include selling the data. Section 5 bars a controller or processor from selling agricultural data without the producer's express written consent. The consent must come through a clear and conspicuous disclosure separate from the main terms of service or data use agreement. Under Section 6, new contracts beginning January 1, 2027 must state this prohibition, and contract terms that waive or limit the Act are void. Section 7 requires reasonable administrative, technical, and physical data security practices. Section 3 defines the key terms and excludes aggregated data, derived data, and data made public by an agency. Under Section 8, the Attorney General can seek an injunction or a $1,000 civil penalty per violation in Lancaster County district court. The Act creates no private cause of action. Section 9 gives a 45-day cure period for violations of Sections 6 or 7, but not Section 5. Section 10 sets rules of construction, including that the Act does not affect existing private contracts. Public records (Section 11). Section 11 amends section 84-712.05 to add subdivision (30). It lets custodians withhold agricultural data from the public unless the data's owner has given prior written consent under the Agricultural Data Privacy Act. Conversational Artificial Intelligence Safety Act (Sections 12 to 18). The Act covers operators of publicly accessible AI services that primarily simulate human conversation. Section 13 excludes several uses, such as developer or research tools, narrow-topic tools, business-internal or customer-service tools, and voice assistants. For minor account holders, Section 14 requires: - a clear disclosure that the user is interacting with AI, shown either persistently or at the start of each session and at least every three hours; - no unpredictable-interval rewards meant to drive engagement; - reasonable measures to block sexually explicit visual depictions, direct statements urging sexually explicit conduct, and statements that sexually objectify the account holder; - reasonable measures to block statements that would lead a reasonable person to think they are talking with a human, such as claims of sentience, simulated emotional dependence, romantic or sexual innuendo, and adult-minor romantic role-play; - privacy and account-management tools for minors and their parents or guardians. Section 15 requires an AI disclosure for any user who a reasonable person would think is talking to a human. Section 16 requires a protocol that responds to suicidal ideation or self-harm prompts by referring users to crisis services. Section 17 bars operators from knowingly and intentionally programming the service to claim it provides professional mental or behavioral health care. Under Section 18, the Attorney General can sue for equitable relief, actual damages, civil penalties of at least $1,000 per violation (capped at $500,000 per operator), and expenses. The Act creates no private right of action. It also creates no liability for an AI model developer for a third-party operator's violations. Operative dates (Section 19). The Conversational AI sections (12 to 18) become operative July 1, 2027. The other sections become operative on their effective date. Section 20 repeals the original section 84-712.05.

← Back to the tracker