Requires controller or processor to de-identify personal data and prohibits re-identification of de-identified data.

This New Jersey bill (A4741) requires businesses that collect personal data (called "controllers" or "processors") to remove identifying information before selling it to third parties. It prohibits these businesses from re-identifying de-identified data or providing third parties with means to re-identify it. The state's Division of Consumer Affairs will establish standards for de-identification, with limited exceptions allowed only for medical research or environmental protection purposes. This affects companies that process or sell personal information in New Jersey, aiming to protect consumer privacy by making it harder to trace data back to individuals.