Technology (Cybersecurity) in New Jersey

in committee · New Jersey · General Assembly Feb 19, 2026

A 4093: Requires certain persons and business entities to maintain comprehensive information security program.

This bill requires businesses that collect or handle personal information of New Jersey residents (such as Social Security numbers, driver's license details, or financial account data) to create and maintain written information security programs. These programs must include risk assessments, employee training, secure data storage policies, and oversight of third-party service providers. Businesses must implement administrative, technical, and physical safeguards tailored to their size, resources, and the data they handle. The law aims to prevent security breaches that could lead to identity theft or fraud for New Jersey residents.

Topics ✓ Technology

Sub-Topics Cybersecurity Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 2067: Requires disclosure of breach of security of geolocation data.

This bill amends New Jersey's data breach law to require businesses and public entities to disclose security breaches involving geolocation data. It adds "geolocation" (the location of an individual determined by electronic devices like phones or tablets) to the legal definition of "personal information," which already includes Social Security numbers and financial account details. Under the change, if a breach compromises geolocation data, the entity must notify affected consumers, just as they currently must for other personal information breaches. This expands existing disclosure requirements to cover location data collected by apps, services, or devices.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Cybersecurity Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 3283: Requires businesses in financial, essential infrastructure, and health care industries to develop cybersecurity plans.

This bill requires businesses in New Jersey's financial, essential infrastructure, and healthcare sectors (called "sensitive businesses") to develop and implement cybersecurity programs. These programs must include risk assessments, incident response plans, and alignment with recognized industry frameworks like NIST. Businesses must submit their plans to New Jersey's Cybersecurity Cell, provide annual compliance certifications, and undergo audits if they fail to comply. The law aims to protect critical systems from cyber threats while keeping submitted plans confidential, not public records.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Feb 24, 2026

S 3635: Establishes "New Jersey Cybersecurity Grant Program"; appropriates $5 million from General Fund.

S 3635 establishes the "New Jersey Cybersecurity Grant Program" within the Office of Homeland Security and Preparedness, appropriating $5 million from the General Fund. The program provides grants to financial and healthcare businesses operating in New Jersey that are deemed high-risk for cybersecurity incidents, with a maximum award of $100,000 per business per fiscal year. Businesses must submit applications online and provide documentation like invoices for reimbursement after purchasing qualifying cybersecurity equipment. The bill defines "sensitive businesses" to include financial institutions and healthcare entities operating in the state.

Topics ✓ Budget & Taxes ✓ Technology

Sub-Topics Procurement State Budget Cybersecurity

in committee · New Jersey · General Assembly Jan 13, 2026

A 1550: Requires adoption and implementation of cybersecurity standards by casinos and sportsbooks; establishes safe gaming certification program.

This bill requires New Jersey casinos and sportsbooks to adopt cybersecurity programs meeting national standards (like NIST or ISO 27000), conduct annual third-party audits, and report security breaches within 72 hours. It establishes a "Safe Gaming Seal" certification for operators exceeding these standards, including features like advanced encryption, responsible gaming tools, and independent security assessments. Noncompliance may result in fines of $10,000 for the first violation and $20,000 for repeat offenses, with potential license suspension. The law applies to all licensed operators and their contracted service providers under New Jersey’s gaming regulations.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · General Assembly Feb 19, 2026

AJR 128: Designates October of each year as "Cyber Security Awareness Month."

AJR 128 designates October of each year as "Cyber Security Awareness Month" in New Jersey to educate all state residents about online safety risks and responsible digital behavior. The bill requires the Governor to issue an annual proclamation encouraging public officials, private organizations, and citizens to participate in awareness activities during October. It does not create new laws or funding but aligns New Jersey with the federal National Cyber Security Awareness Month designation. The resolution aims to increase public understanding of threats like data breaches, fraud, and privacy risks, building on existing state efforts like the Cybersecurity and Communications Integration Cell.

Topics ✓ Technology

Sub-Topics Cybersecurity Online Safety

in committee · New Jersey · General Assembly Feb 19, 2026

A 4198: Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines.

This bill requires New Jersey's Cybersecurity and Communications Integration Cell (NJCCIC) to conduct a 12-month study of cybersecurity infrastructure across public entities (state/local governments) and private businesses operating in New Jersey. During the study, these entities must report cybersecurity incidents and breaches to the NJCCIC for 12 months. Within six months of the study's completion, the NJCCIC must create cybersecurity guidelines for all covered entities, which must be implemented within one year. Failure to adopt these guidelines may result in civil penalties, with the Department of Homeland Security setting the penalty schedule.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1511: Requires State, county, and municipal employees and certain State contractors to complete cybersecurity awareness training.

This bill requires all New Jersey state employees (including those in executive, judicial, and legislative branches), county and municipal workers, and state contractors with access to state computer systems or databases to complete annual cybersecurity awareness training. The training must be delivered online, approved by the state Chief Technology Officer, and verified by employees or contractors. It includes provisions for periodic audits to ensure compliance across all covered groups, with specific content adjustments possible for roles like procurement staff. The policy applies to public institutions of higher education and contractors during active contracts, effective 90 days after enactment.

Topics ✓ Technology

Sub-Topics Cybersecurity

died · New Jersey · Senate Jan 13, 2026

S 1498: Establishes New Jersey Pathways to Career Opportunities Initiative Act.

This bill establishes the New Jersey Pathways to Career Opportunities Initiative, operated by the New Jersey Community College Consortium. It creates "Centers of Workforce Innovation" focused on high-demand fields like healthcare, cybersecurity, renewable energy, and manufacturing. These centers will develop publicly available job training curricula, provide skills for employment, promote financial aid access, and expand apprenticeships. The initiative directly affects students, workers, county colleges, employers, and educational institutions by connecting workforce development with regional economic needs. (Note: The bill was introduced in January 2026 but withdrawn the same day as it was already approved as P.L.2025, c.374.)

Topics ✓ Education ✓ Energy ✓ Labor & Employment ✓ Technology

Sub-Topics Higher Education Student Financial Aid Renewable Energy Workforce Development Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 321: Prohibits government entities from procuring and using technology products and services from companies owned by, controlled by, or domiciled in certain foreign countries.

New Jersey's S 321 prohibits state agencies, local governments, and political subdivisions from purchasing or using information technology products or services from companies owned, controlled, or based in foreign countries identified as significant cybersecurity threats by U.S. or New Jersey government agencies. The bill relies on threat designations from entities like the U.S. Director of National Intelligence, Homeland Security, and New Jersey's Office of Homeland Security. It requires government entities to avoid technology from these specified countries to address cyber espionage risks. The law takes effect immediately upon enactment.

Topics ✓ Technology

Sub-Topics Cybersecurity

All technology bills