Revises requirements for disclosure of a breach of security of certain computerized records containing personal information.

This New Jersey bill (S 3028) requires businesses and public agencies holding personal data to notify affected New Jersey residents within five business days if their information is breached. It clarifies that delays are only permitted for law enforcement investigations or if an investigation confirms misuse is unlikely (with written documentation required). Businesses must use written, electronic, or alternative methods (like website notices or email) for large breaches affecting over 500,000 people. The law updates existing data breach disclosure rules to set specific timelines while maintaining existing exemptions.