Prohibits acquisition or disclosure of certain personal health information without consent.

This New Jersey bill (S 2107) requires health care providers, health app developers, and third parties to obtain explicit consent before collecting or sharing residents' biometric data (like heart rate or fingerprints), health data (medical history or payments), or protected health information. It mandates a single initial consent for data acquisition but requires separate consent within three days for each disclosure to another party. Exceptions apply for medical treatment between providers, and the law does not override federal HIPAA protections. The bill was introduced in January 2026 and referred to the Senate Health Committee.