Technology (Data Privacy) in New Jersey

in committee · New Jersey · General Assembly Jan 13, 2026

A 1999: Expands "Daniel's Law" to prohibit disclosure of personal information concerning certain court administrators.

This bill expands New Jersey's "Daniel's Law" to protect municipal court administrators' personal information. It prohibits posting home addresses or unpublished phone numbers online without authorization, with penalties for violations (crimes of the third or fourth degree). Covered individuals include active, retired, or former municipal court administrators and their immediate family members living in the same household. Authorized representatives (such as family members or legal guardians) can request removal of such information from the internet.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 3282: Authorizes issuance of electronic copies of vital records.

This bill authorizes New Jersey registrars to issue certified electronic copies of vital records - including birth, death, marriage, domestic partnership, and civil union certificates - alongside traditional paper copies. It specifies that authorized requesters (such as the record subject, family members, government agencies, or legal representatives) can receive these electronic copies upon request. The Commissioner of Health must establish security standards for electronic copies, including encryption, identity verification, data privacy protocols, and authentication features to prevent forgery. Registrars may charge fees for electronic copies but must ensure they meet the same legal standards as paper certified copies.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · Senate Mar 23, 2026

S 3522: Establishes "Privacy Protection Act"; concerns collection and sharing of certain personal information.

This bill prohibits New Jersey government entities and healthcare facilities from collecting or sharing certain personal information, including immigration status, citizenship, birthplace, Social Security numbers, and tax IDs, except when necessary to provide public services or benefits. It prevents these entities from disclosing such information publicly, except under specific legal circumstances like court orders, subpoenas, or when required for election eligibility. The bill also specifically restricts the sale or sharing of automated license plate recognition data collected by government agencies. These provisions aim to limit unnecessary data collection and protect individuals seeking public services or healthcare.

Topics ✓ Immigration ✓ Technology

Sub-Topics Citizenship & Naturalization Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 1852: Requires certain notifications and free credit reports for customers following breach of security of personal information within business or public entity.

This bill requires businesses and public entities that handle personal information of New Jersey residents to notify affected customers promptly after a security breach involving unauthorized access to their data. It mandates written or electronic notice within the "most expedient time possible," including details about compromised information and steps to protect accounts, while eliminating the current option for "substitute notice" (like website postings) for large-scale breaches. Businesses must also cover the cost of providing customers with free credit reports from consumer reporting agencies for six months following a breach, with payment for up to 12 months of reports. The law applies to any entity maintaining computerized records with NJ residents' personal data and requires prior reporting of breaches to the State Police before customer notification.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 829: Requires school districts to implement policy pertaining to use in school setting of medical devices that require utilization of district's internet.

This New Jersey bill requires school districts to create policies for students using internet-connected medical devices (like remote monitoring tools) prescribed by healthcare providers. The policies must be developed within 90 days and cover parental information sharing, strict data privacy protections, and staff training. School districts must also maintain necessary technology infrastructure, with funding available through a new "Medical Device Technology Fund" grant program. Districts must annually report student usage numbers, implementation challenges, and suggestions for improvement to the state education commissioner. The bill directly affects school districts, students with medical devices, and their parents/guardians.

Topics ✓ Education ✓ Healthcare ✓ Technology

Sub-Topics School Safety Student Health Telehealth Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 711: Requires public institution of higher education to establish plans concerning cyber security and prevention of cyber attacks.

New Jersey bill A 711 requires public colleges and universities to create and maintain cyber security plans to protect student and staff data. The plans must cover monitoring for threats, assessing risks, preventing breaches, and responding to incidents. Institutions must regularly update these plans and consult with the state’s Cybersecurity Center for best practices. The bill defines a "cyber attack" as unauthorized access to personal information (like Social Security numbers or financial data) without proper security, but excludes phishing attempts and legitimate employee data use. It also mandates reporting actual cyber attacks to the state office while clarifying what does not count as an attack.

Topics ✓ Education ✓ Technology

Sub-Topics Cybersecurity Data Privacy

signed · New Jersey · General Assembly Mar 25, 2026

A 4070: Establishes "Privacy Protection Act"; concerns collection and sharing of certain personal information.

This New Jersey bill establishes the "Privacy Protection Act" to limit how government agencies and healthcare facilities collect and share certain personal information. It prohibits them from requesting details like immigration status, citizenship, social security numbers, or tax IDs unless necessary for specific public services, benefits, or healthcare delivery (with healthcare exceptions for patient safety). The bill requires written consent in the person's preferred language for sharing any collected data, detailing exactly what will be shared, why, and confirming consent is voluntary without retaliation. It also bans selling or sharing vehicle license plate data except under court orders, subpoenas, or with explicit written consent, and mandates government entities to update privacy policies within one year.

Topics ✓ Healthcare ✓ Immigration ✓ Technology

Sub-Topics Citizenship & Naturalization Driver Licenses & IDs Data Privacy Tags Privacy

in committee · New Jersey · Senate Jun 30, 2026

S 3612: Establishes "Fair Price Protection Act."*

This bill prohibits New Jersey businesses from using consumers' personal data - including biometric information, genetic data, or details about protected characteristics like race, age, or gender - to set prices for goods or services. It specifically bans "personalized algorithmic pricing" (using algorithms to adjust prices based on personal data) and "surveillance pricing" (customizing prices based on tracking consumer behavior). The law does not prevent businesses from offering standard discounts, promotions, or loyalty programs. It directly affects all businesses selling merchandise or services to New Jersey residents and enforces penalties of up to $20,000 per violation under the state's Consumer Fraud Act.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 2297: Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.

This bill establishes privacy protections for sensitive consumer health data in New Jersey, directly affecting residents, healthcare providers, and entities handling health information. It requires explicit, informed consent for collecting or using health data (prohibiting deceptive designs or broad terms of service) and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to health services. Key provisions mandate that businesses must authenticate requests to exercise privacy rights and prohibit sharing data without consent, while excluding research data processed under institutional review board oversight. The law applies to all entities collecting health data from New Jersey residents or processing data linked to New Jersey consumers.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Women's Health Consumer Data Protection Data Privacy

in committee · New Jersey · General Assembly Jan 13, 2026

A 1260: "Human Trafficking and Child Exploitation Prevention Act"; requires Internet-connected devices to have blocking capability in certain circumstances.

This New Jersey bill (A-1260) requires manufacturers and sellers of internet-connected devices to include digital blocking technology that automatically restricts access to obscene material, child pornography, revenge porn, and websites linked to human trafficking or prostitution. It directly affects device companies and minors (who must have blocking active unless they pay a $20 opt-out fee to deactivate it). Key provisions include mandatory blocking of harmful content, a 5-day window to unblock mistakenly blocked material upon consumer report, and quarterly fees ($20 per device) sent to fund the state’s Human Trafficking Commission. The bill is not yet law - it was introduced January 2026 and referred to committee.

Topics ✓ Technology

Sub-Topics Data Privacy Online Safety

All technology bills