Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.

This bill requires businesses in New Jersey's financial, essential infrastructure (like utilities), and healthcare sectors to create cybersecurity plans and report certain incidents. Specifically, "sensitive businesses" must develop programs following industry standards (such as NIST frameworks), identify a cybersecurity lead, conduct risk assessments, and submit annual compliance certifications. They must also report incidents affecting billing systems, data privacy, or industrial control systems (e.g., power grid operations) to the New Jersey Cybersecurity Cell. The bill applies only to covered businesses operating in New Jersey and does not create new penalties for noncompliance.