New Jersey
Summary
Law: An Act concerning commercial Internet websites, online services, consumers, and personally identifiable information (the Act)
Regulator: New Jersey Office of the Attorney General (AG)
Summary: On January 16, 2024, the Act was signed by the Governor of New Jersey. The Act marks the States first comprehensive privacy legislation, and includes rights for data subjects, obligations of data controllers and data processors, and the exclusive enforcement of its provisions by the New Jersey AG.
Beyond the Act, New Jersey courts have interpreted Article 1(1) of the New Jersey Constitution to guarantee an individual's right to privacy. In addition, there are various privacy-related provisions in the New Jersey Revised Statutes and the New Jersey Administrative Code which create obligations for data collected by companies in different sectors, including the health, financial, employment, and education sectors.
In addition, under the New Jersey breach notification requirements, businesses need to disclose, without unreasonable delay, breaches of computerised records to affected customers, as well as to the Division of State Police in the New Jersey Department of Law and Public Safety.