Requires certain persons and business entities to maintain comprehensive information security program.

This bill requires businesses that collect or handle personal information of New Jersey residents (such as Social Security numbers, driver's license details, or financial account data) to create and maintain written information security programs. These programs must include risk assessments, employee training, secure data storage policies, and oversight of third-party service providers. Businesses must implement administrative, technical, and physical safeguards tailored to their size, resources, and the data they handle. The law aims to prevent security breaches that could lead to identity theft or fraud for New Jersey residents.