Nebraska AI Meeting Recording Laws (2026)

Nebraska follows a one-party consent rule under Neb. Rev. Stat. § 86-290, making AI meeting recorders lawful when the person activating the tool is a participant in the conversation. That single consent satisfies the statute, so no advance notice to other attendees is required.

Nebraska's one-party consent framework under Neb. Rev. Stat. § 86-290 makes it one of the more permissive states for AI meeting recording. If you are a participant in a conversation, you can legally record it without notifying the other parties. That baseline rule applies to phone calls, in-person conversations, and virtual meetings conducted through platforms like Zoom, Microsoft Teams, or Google Meet.

Nebraska's second layer of compliance comes from biometric data rules, not a new criminal statute. The Nebraska Data Privacy Act (Neb. Rev. Stat. §§ 87-1101 to 87-1130), effective since January 1, 2025, classifies biometric data, including voiceprints, as sensitive data and requires a business to get a consumer's opt-in consent before processing it. AI meeting tools that identify speakers by their voice, create voiceprint profiles, or use biometric data for any purpose fall within that consent requirement. A separate bill that would have created a standalone, more expansive biometric statute, LB 204 (the Biometric Autonomy Liberty Law), was indefinitely postponed by the Legislature on April 17, 2026, and never became law. The combination of one-party recording consent and opt-in consent for sensitive biometric data is the legal environment that actually governs AI meeting tools in Nebraska today.

Nebraska's Recording Consent Framework

One-Party Consent Under § 86-290

Nebraska's wiretapping statute, Neb. Rev. Stat. § 86-290, prohibits the intentional interception of wire, electronic, or oral communications. The critical exception: recording is lawful when at least one party to the communication consents, provided the recording is not made for the purpose of committing any criminal or tortious act.

This means a meeting organizer who activates an AI recording tool is providing their own consent as a party to the conversation. Under Nebraska law, that single consent is sufficient. The organizer does not need to obtain permission from every other participant before pressing record.

The statute covers three categories of communication: wire communications (phone calls and VoIP), electronic communications (emails, text messages, data transmissions), and oral communications (in-person conversations where the speaker has a reasonable expectation of privacy). Virtual meetings conducted over platforms like Zoom or Teams typically qualify as wire or electronic communications.

How This Applies to AI Meeting Recorders

When a Nebraska-based employee activates Otter.ai, Fireflies.ai, or Zoom AI Companion during a meeting, their own participation in the call satisfies the one-party consent requirement. The AI tool functions as a recording mechanism authorized by a consenting party.

There is an important distinction to draw here. The AI tool itself is not a "party" to the conversation. It is an instrument used by a consenting party. Nebraska law does not require that the recording device itself have standing as a participant. The consent of the human user who deployed the tool is what matters.

However, when meeting participants are located in all-party consent states like California, Illinois, or Washington, the stricter state's law typically governs. Nebraska's one-party rule protects Nebraska-based users recording conversations with other Nebraska participants, but cross-state meetings require a more careful analysis.

Federal Law Alignment

Federal wiretapping law under 18 U.S.C. § 2511 follows the same one-party consent standard. A person who is a party to the communication, or who has the consent of one party, can lawfully intercept it under federal law. Nebraska users face no conflict between state and federal requirements when recording conversations they participate in.

Nebraska's Biometric Data Protections (Nebraska Data Privacy Act)

Overview and Effective Date

On January 1, 2025, the Nebraska Data Privacy Act (Neb. Rev. Stat. §§ 87-1101 to 87-1130) took effect, making Nebraska the seventeenth state to adopt a comprehensive consumer data privacy law. Rather than a standalone biometric statute, the Act folds biometric data into a broader sensitive data category that also covers racial or ethnic origin, health diagnoses, sexual orientation, citizenship or immigration status, precise geolocation, and data collected from a known child.

For AI meeting recording tools, the biometric provisions are the most consequential. Many AI transcription services use speaker identification technology that creates unique voiceprint profiles to distinguish between speakers, attribute text to the correct participant, and improve transcription accuracy over time. The Act defines biometric data as data generated to identify a specific individual through an automatic measurement of a biological characteristic, and it expressly lists voiceprints alongside fingerprints, retina images, and iris images.

A separate bill, LB 204 (the Biometric Autonomy Liberty Law), was introduced in the Legislature's 109th session and would have created a dedicated, more expansive biometric statute for Nebraska. It was indefinitely postponed on April 17, 2026, and never became law. The Nebraska Data Privacy Act's sensitive-data provisions, described below, remain Nebraska's only current biometric-specific protection.

Written Consent Requirement

The Nebraska Data Privacy Act requires a business to obtain a consumer's opt-in consent before processing sensitive data, which includes biometric data used to identify someone. This is a higher bar than the one-party recording consent under § 86-290. Even if recording the meeting audio is legal under the wiretapping statute, processing voiceprint data extracted from that recording to identify a speaker requires separate, affirmative consent from that person.

Consent under the Act must be a clear and affirmative act, such as a written statement or another unambiguous action, and consent obtained through deceptive design (a dark pattern) does not count. AI meeting tools that analyze vocal patterns to identify speakers are processing biometric data within the Act's definition of sensitive data. Notably, the Act's consumer protections do not extend to individuals acting in an employment context, a point covered in more detail below.

Consumer Rights and the Employment-Context Exclusion

The Nebraska Data Privacy Act gives consumers rights to access, correct, delete, and obtain a portable copy of their personal data, including biometric data, and it prohibits selling sensitive data without prior consent. Businesses cannot retaliate against a consumer for declining consent or exercising these rights.

Critically, the Act's definition of consumer excludes an individual acting in a commercial or employment context. That means Nebraska employees do not get the Act's consumer rights, including its opt-in consent requirement, for biometric data an employer collects about them as employees. An AI meeting tool that builds voiceprint profiles of a company's own employees during internal meetings sits outside the Act's coverage; the same tool building voiceprint profiles of external meeting participants, such as clients or vendors, who qualify as Nebraska consumers, is covered.

Enforcement

The Nebraska Attorney General has exclusive enforcement authority under the Nebraska Data Privacy Act; there is no private right of action for consumers. Before pursuing a civil penalty, the AG must give a business 30 days to cure the violation. If the business fails to cure, the AG can seek civil penalties of up to $7,500 per violation. As of mid-2026, no enforcement actions specific to AI meeting recording tools have been publicly announced.

Popular AI Meeting Tools and Nebraska Compliance

The recording consent column is straightforward: Nebraska's one-party rule makes all these tools legally permissible when deployed by a meeting participant. The biometric column is where compliance gets complicated. Any tool that creates speaker profiles, identifies voices across multiple meetings, or stores vocal characteristics for future identification purposes likely triggers the Nebraska Data Privacy Act's opt-in consent requirement, at least for meeting participants who qualify as consumers rather than the company's own employees.

Best practice in Nebraska is to enable recording features (which require only one-party consent) while carefully evaluating whether speaker identification or voice analysis features create biometric data collection obligations under the Nebraska Data Privacy Act, particularly when non-employee participants are involved.

Penalties for Violations

Criminal Penalties Under § 86-290

Illegal interception of communications in Nebraska is a Class IV felony. As of 2026, Class IV felony penalties include up to 2 years imprisonment, up to 12 months post-release supervision, and a fine of up to $10,000.

The criminal provision applies to intentional interception without the consent of any party. Since Nebraska is a one-party consent state, criminal liability arises only when a person records a conversation to which they are not a party and without the consent of any participant. A third party who deploys a hidden recording device in a conference room without anyone's knowledge, for example, would face Class IV felony charges.

Civil Damages Under § 86-297

Neb. Rev. Stat. § 86-297 provides civil remedies for victims of unlawful interception. For most violations, including recording a call or meeting without any party's consent, subsection (3)(b) sets damages at the greater of two calculations: actual damages plus the violator's profits from the violation, or statutory damages of whichever is greater between $100 for each day of violation and $10,000. Courts can also award reasonable attorney fees, litigation costs, and equitable relief such as an injunction.

The lower, $50-to-$1,000 statutory damages figures apply only to a narrow carve-out in § 86-297(3)(a) covering unscrambled private satellite video or certain unencrypted radio communications; they do not apply to recording a phone call, in-person conversation, or video meeting, which fall under the higher general damages in § 86-297(3)(b).

Nebraska Data Privacy Act Penalties

Violations of the Nebraska Data Privacy Act's sensitive-data consent requirement, including its biometric data provisions, are enforced exclusively by the Attorney General, not through private lawsuits. After a 30-day cure period, the AG can seek civil penalties of up to $7,500 per violation and injunctive relief. Nebraska does not currently provide a private right of action comparable to Illinois' Biometric Information Privacy Act (BIPA), which has generated billions of dollars in class action settlements; the 2025-2026 bill that would have moved Nebraska closer to that model, LB 204, was indefinitely postponed and never enacted.

Employer and Workplace Considerations

Deploying AI Meeting Tools in Nebraska Workplaces

Nebraska employers benefit from the one-party consent rule when deploying AI meeting recorders. An employer who is a party to a workplace meeting (through a manager, HR representative, or authorized employee) can lawfully record the meeting without notifying all participants under § 86-290.

The Nebraska Data Privacy Act's opt-in consent requirement for biometric data does not extend to employees acting in an employment context, so it does not independently obligate an employer to get consent before an AI tool builds voiceprint profiles of its own employees. That consent requirement does apply, however, when a meeting includes non-employee participants, such as clients, vendors, or job candidates, who qualify as Nebraska consumers.

Practical and legal best practices still favor transparency regardless of what is strictly required. Employers should establish clear written policies on when and how AI meeting tools are used, notify employees and meeting guests that meetings may be recorded with AI tools, obtain consent before enabling voiceprint or speaker-identification features whenever a non-employee consumer may be affected, and allow employees to opt out of biometric data collection where feasible, even though state law does not currently require it for employees.

The Workplace Privacy Act

Nebraska's Workplace Privacy Act (Neb. Rev. Stat. §§ 48-3501 to 48-3511) adds another layer of protection. Employers cannot require employees to waive protections under the Act as a condition of employment. Any agreement to waive rights under the Act is void and unenforceable as against Nebraska public policy.

While the Workplace Privacy Act primarily addresses off-duty conduct and social media privacy, its anti-waiver provisions reinforce the principle that employees retain privacy rights even when one-party consent makes recording technically legal.

Cross-State Meeting Complications

Nebraska employers with remote workers in all-party consent states face the same challenge as employers everywhere: the strictest applicable law typically governs. If a Nebraska-based manager records a meeting that includes employees in California, Washington, or Illinois, those states' all-party consent requirements may apply to the entire recording.

Companies should implement location-aware recording policies that account for where each meeting participant is located. When in doubt, obtaining consent from all participants is the safest approach, even though Nebraska law does not require it.

The Otter.ai Litigation and Nebraska Implications

The class action lawsuit against Otter.ai (In re Otter.AI Privacy Litigation, N.D. Cal., No. 5:25-cv-06911) was filed in California, but its implications extend to Nebraska users. The lawsuit alleges that Otter's AI bots joined meetings and recorded participants without adequate consent, then used the captured audio to train machine learning models.

For Nebraska users, the recording itself would likely be lawful under the state's one-party consent rule, assuming the Otter user was a meeting participant. But the voiceprint and biometric data allegations in the lawsuit highlight the additional exposure the Nebraska Data Privacy Act creates. If Otter.ai's speaker identification technology creates voiceprint profiles of Nebraska meeting participants without opt-in consent, that activity may violate the Act's sensitive-data provisions regardless of the recording's legality under § 86-290, at least as to participants who qualify as consumers rather than employees of the company using the tool.

The Ambriz v. Google "capability test" is also relevant. A California court ruled that an AI vendor's mere capability to use intercepted data for its own purposes (such as model training) can support a privacy claim, even if the vendor does not actually use the data that way. While this ruling is California-specific, it signals a broader judicial trend that the Nebraska AG may consider when evaluating AI meeting tool compliance under the Nebraska Data Privacy Act.

This article provides general legal information about Nebraska recording laws as they apply to AI meeting tools. Laws and their interpretations can change. Consult an attorney for advice specific to your situation.

More Nebraska Laws

• Nebraska Recording Laws
• Nebraska Workplace Recording Laws
• Nebraska Data Privacy Laws
• Nebraska Employee Monitoring Laws