Technology (Cybersecurity) in New Jersey

in committee · New Jersey · Senate Jan 13, 2026

S 2940: Establishes Office of Cybersecurity Infrastructure.

S 2940 establishes the Office of Cybersecurity Infrastructure within New Jersey's Executive Branch to manage state cybersecurity policies and infrastructure. The office, led by a Governor-appointed Director reporting directly to the Governor (not the Treasury Department), will create cybersecurity policies for all state agencies, secure digital systems for public-private interactions, and develop AI integration guidelines for public and private institutions. It affects all state departments, agencies, and entities interacting with residents digitally, requiring them to coordinate with the new office. The office must publish annual reports on cybersecurity operations and maintain a public website with operational details.

Topics ✓ Technology

Sub-Topics Artificial Intelligence Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1176: Requires certain procedures and training for municipalities, counties, and school districts in response to cybersecurity incidents.

S 1176 requires New Jersey municipalities, counties, and school districts to establish cybersecurity incident response procedures and staff training. It mandates that these public entities report cybersecurity incidents to the state Office of Homeland Security and Preparedness within 72 hours of discovery. The bill also directs the office to create a secure reporting system and post clear submission instructions online within 90 days of the law's effective date. These measures aim to improve coordinated response to cyber threats across local government and school systems.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1225: Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines.

This bill requires New Jersey's Cybersecurity and Communications Integration Cell (NJCCIC) to conduct a 12-month study of cybersecurity infrastructure across all public entities (state/local government) and private businesses operating in New Jersey. It mandates these entities to report cybersecurity incidents and breaches for 12 months during the study. Based on the findings, the NJCCIC must create cybersecurity guidelines within six months of the study's end, requiring all affected entities to implement these guidelines within one year. Failure to comply may result in civil penalties established by the Department of Homeland Security.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jun 30, 2026

S 2316: Regulates data brokers, data collectors, and collection and dissemination of certain sensitive information.**

This bill requires data brokers operating in New Jersey to register with the Division of Consumer Affairs annually ($100 fee) and submit detailed information about their data collection, privacy policies, opt-out options, and data breach history. It directly affects businesses that collect and sell personal identifying information without a direct relationship to the individual, such as those selling health data. The key provision bans data brokers from selling, sharing, or transmitting physical health records (covering treatments for physical conditions) or behavioral health records (covering mental health, substance use, or emotional disorder care). The law establishes a public registry of registered brokers to increase transparency about how sensitive health data is handled.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Mental Health Consumer Data Protection Cybersecurity Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 611: Directs New Jersey Cybersecurity and Communications Integration Cell, Office of Information Technology, and New Jersey Big Data Alliance to develop advanced cyberinfrastructure strategic plan.

This bill requires New Jersey's Cybersecurity and Communications Integration Cell, Office of Information Technology, and New Jersey Big Data Alliance to develop a strategic plan for the state's cyberinfrastructure. The plan must assess current systems (including data storage, networks, and expertise), create a roadmap for a shared data cloud and high-speed network, and address workforce development and cybersecurity. It specifically directs the creation of an open data repository to improve collaboration between government, academia, and industry. The agencies must submit the completed plan to the Governor and Legislature within one year of the bill's effective date. This is a procedural directive focused on planning, not new regulations or funding.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 629: Directs BPU to establish certain standards concerning electric public utility use of customer energy usage data.

This bill requires New Jersey's Board of Public Utilities (BPU) to establish statewide privacy standards for electric utilities' handling of customer energy usage data (CEUD) collected through smart meters. It directly affects electric utilities, their customers (who own their CEUD), and third parties seeking access to data with customer consent. Key provisions mandate utilities to provide real-time data access via digital platforms within 24 hours, obtain written informed consent for third-party data sharing, implement cybersecurity protections, and file detailed data access plans with the BPU within 90 days of the law's effective date. The bill also requires utilities to disclose data-sharing practices and ensure CEUD use supports clean energy goals and grid reliability.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1802: Requires artificial intelligence companies to conduct safety tests and report results to Office of Information Technology.

This bill requires AI companies operating in New Jersey to annually test their AI products for safety risks and submit detailed reports to the state's Office of Information Technology. Specifically, companies must test for cybersecurity threats, bias in data, and accuracy issues, then report the results - including a list of tested products, test descriptions, third-party testers used, and findings. The Office of Information Technology will establish minimum testing standards and review all submitted reports. This directly affects private AI companies and public agencies selling, developing, or deploying AI technology within the state.

Topics ✓ Technology

Sub-Topics Artificial Intelligence Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1262: Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.

This bill requires businesses in New Jersey's financial, essential infrastructure (like utilities), and healthcare sectors to create cybersecurity plans and report certain incidents. Specifically, "sensitive businesses" must develop programs following industry standards (such as NIST frameworks), identify a cybersecurity lead, conduct risk assessments, and submit annual compliance certifications. They must also report incidents affecting billing systems, data privacy, or industrial control systems (e.g., power grid operations) to the New Jersey Cybersecurity Cell. The bill applies only to covered businesses operating in New Jersey and does not create new penalties for noncompliance.

Topics ✓ Technology

Sub-Topics Cybersecurity Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 3137: Requires each government entity in this State to conduct review of cybersecurity infrastructure and make recommendations.

New Jersey's S 3137 requires all state and local government entities - including municipalities, counties, school districts, state departments, and public universities - to conduct a cybersecurity review of their systems. Each entity must evaluate current security, identify high-risk issues, propose modernization strategies for networks and software, and suggest policy changes. The head of each entity must submit findings and recommendations to the Governor and Legislature within 45 days of the bill's effective date. This bill directly affects all public entities responsible for managing digital infrastructure across New Jersey.

Topics ✓ Technology

Sub-Topics Cybersecurity

in committee · New Jersey · Senate Jan 13, 2026

S 1623: Establishes "Innovation Partnership"; provides funding for certain nonprofit partnerships to promote certain emerging technology businesses.

This bill establishes the "Innovation Partnership" program, administered by New Jersey's Commission on Science, Innovation and Technology, to fund nonprofit organizations supporting emerging technology businesses. It directly affects minority-owned and women-owned tech companies (defined as businesses where 51%+ ownership and control is held by minorities or women) in fields like cybersecurity, biotechnology, renewable energy, and advanced computing. The program provides funding through a dedicated "Fund" to help these businesses develop new technologies, conduct pilot manufacturing, and commercialize innovations. Nonprofit "Innovation Partners" certified by the commission will identify and support qualifying businesses, aiming to strengthen New Jersey's tech ecosystem.

Topics ✓ Energy ✓ Technology

Sub-Topics Renewable Energy Cybersecurity Emerging Technology

All technology bills