Requires Internet service providers to keep confidential subscriber's personally identifiable information unless subscriber authorizes Internet service provider in writing to disclose information.

New Jersey Assembly Bill A391 requires internet service providers (ISPs) to keep subscribers' personally identifiable information confidential unless the subscriber provides written authorization to disclose it. This applies to residential and business subscribers in New Jersey using internet services with equipment located in the state, covering details like names, addresses, location data, browsing history, and communication contents. ISPs must provide written notice of this requirement to subscribers and cannot deny service for refusing to authorize disclosure. The bill excludes disclosures related to an ISP's "ordinary course of business" (e.g., billing) or investigations under New Jersey's Wiretapping Act. Violations would be deemed unlawful under the state's Consumer Fraud Act.