Requires certain notifications and free credit reports for customers following breach of security of personal information within business or public entity.

This bill requires New Jersey businesses and public entities to notify affected New Jersey residents within a reasonable time when a security breach compromises their personal information, using written or electronic notice. The notice must include contact details for a representative who can explain the breach, outline protective steps, and inform customers about their access to free credit reports. Businesses must cover the cost of one free credit report per month for 12 months following the breach and reimburse third parties that manage customer data for notification and credit report expenses. This replaces current law's "substitute notice" option for large breaches, strengthening consumer protections after data incidents.