This New Jersey bill requires school districts to create policies for students using internet-connected medical devices (like remote monitoring tools) prescribed by healthcare providers. The policies must be developed within 90 days and cover parental information sharing, strict data privacy protections, and staff training. School districts must also maintain necessary technology infrastructure, with funding available through a new "Medical Device Technology Fund" grant program. Districts must annually report student usage numbers, implementation challenges, and suggestions for improvement to the state education commissioner. The bill directly affects school districts, students with medical devices, and their parents/guardians.
New Jersey bill A 711 requires public colleges and universities to create and maintain cyber security plans to protect student and staff data. The plans must cover monitoring for threats, assessing risks, preventing breaches, and responding to incidents. Institutions must regularly update these plans and consult with the state’s Cybersecurity Center for best practices. The bill defines a "cyber attack" as unauthorized access to personal information (like Social Security numbers or financial data) without proper security, but excludes phishing attempts and legitimate employee data use. It also mandates reporting actual cyber attacks to the state office while clarifying what does not count as an attack.
This New Jersey bill establishes the "Privacy Protection Act" to limit how government agencies and healthcare facilities collect and share certain personal information. It prohibits them from requesting details like immigration status, citizenship, social security numbers, or tax IDs unless necessary for specific public services, benefits, or healthcare delivery (with healthcare exceptions for patient safety). The bill requires written consent in the person's preferred language for sharing any collected data, detailing exactly what will be shared, why, and confirming consent is voluntary without retaliation. It also bans selling or sharing vehicle license plate data except under court orders, subpoenas, or with explicit written consent, and mandates government entities to update privacy policies within one year.
This bill prohibits New Jersey businesses from using consumers' personal data - including biometric information, genetic data, or details about protected characteristics like race, age, or gender - to set prices for goods or services. It specifically bans "personalized algorithmic pricing" (using algorithms to adjust prices based on personal data) and "surveillance pricing" (customizing prices based on tracking consumer behavior). The law does not prevent businesses from offering standard discounts, promotions, or loyalty programs. It directly affects all businesses selling merchandise or services to New Jersey residents and enforces penalties of up to $20,000 per violation under the state's Consumer Fraud Act.
This bill establishes privacy protections for sensitive consumer health data in New Jersey, directly affecting residents, healthcare providers, and entities handling health information. It requires explicit, informed consent for collecting or using health data (prohibiting deceptive designs or broad terms of service) and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to health services. Key provisions mandate that businesses must authenticate requests to exercise privacy rights and prohibit sharing data without consent, while excluding research data processed under institutional review board oversight. The law applies to all entities collecting health data from New Jersey residents or processing data linked to New Jersey consumers.
This New Jersey bill (A-1260) requires manufacturers and sellers of internet-connected devices to include digital blocking technology that automatically restricts access to obscene material, child pornography, revenge porn, and websites linked to human trafficking or prostitution. It directly affects device companies and minors (who must have blocking active unless they pay a $20 opt-out fee to deactivate it). Key provisions include mandatory blocking of harmful content, a 5-day window to unblock mistakenly blocked material upon consumer report, and quarterly fees ($20 per device) sent to fund the state’s Human Trafficking Commission. The bill is not yet law - it was introduced January 2026 and referred to committee.
This New Jersey bill prohibits state pension and annuity funds from investing in companies that collect or manipulate personal data - without a warrant or court order - to determine immigration status or citizenship. It requires the State Investment Council to identify such companies using an independent privacy firm, then divest funds from them by January 1 of the second year after the bill takes effect, while following standard investment practices. The Council must submit annual reports detailing divested investments and progress to the Governor and Legislature. The bill also shields officials from legal liability for divestment decisions made under its requirements.
This bill creates a framework for New Jersey's Department of Transportation (DOT) to partner with private companies to collect and share de-identified traffic data. It allows private entities to handle the development and operation of data projects using location information (like vehicle positions within 1,750 feet) and driving conditions, as long as the data cannot be linked to specific individuals. The goal is to provide real-time, accurate information to motorists and the DOT about road closures, weather, and traffic conditions. All projects must comply with state data privacy laws, and private partners are explicitly not considered state agencies.
This bill requires New Jersey hospitals and clinical laboratories to implement cultural competency training for staff collecting patient demographic data on race, ethnicity, sexual orientation, and gender identity. It specifically prohibits collecting sexual orientation or gender identity data for patients under 18 unless the minor or their parent/guardian voluntarily provides it for medical treatment only. Hospitals and labs must electronically record these demographics using standardized categories (e.g., "gay/lesbian" for sexual orientation, "transgender male-to-female" for gender identity) and report the data to the state health department for disease surveillance. The bill directly affects healthcare providers in New Jersey who handle patient records, ensuring consistent, sensitive data collection practices while protecting minors' privacy.
This resolution establishes the Assembly Select Committee on COVID-19 Contact Tracing Data Privacy to examine how personal data collected through contact tracing during the pandemic is handled. The committee, made up of nine Assembly members (five appointed by the Speaker, four by the Minority Leader), will study data collection, storage, usage, and privacy safeguards to balance public health needs with individual privacy rights. It must submit findings and recommendations within 60 days of organizing, with the resolution ending 30 days after the report is delivered. The committee’s work will inform potential future policies on protecting contact tracing data privacy.
