This New Jersey bill prohibits state pension and annuity funds from investing in companies that collect or manipulate personal data - without a warrant or court order - to determine immigration status or citizenship. It requires the State Investment Council to identify such companies using an independent privacy firm, then divest funds from them by January 1 of the second year after the bill takes effect, while following standard investment practices. The Council must submit annual reports detailing divested investments and progress to the Governor and Legislature. The bill also shields officials from legal liability for divestment decisions made under its requirements.
This bill creates a framework for New Jersey's Department of Transportation (DOT) to partner with private companies to collect and share de-identified traffic data. It allows private entities to handle the development and operation of data projects using location information (like vehicle positions within 1,750 feet) and driving conditions, as long as the data cannot be linked to specific individuals. The goal is to provide real-time, accurate information to motorists and the DOT about road closures, weather, and traffic conditions. All projects must comply with state data privacy laws, and private partners are explicitly not considered state agencies.
This bill requires New Jersey hospitals and clinical laboratories to implement cultural competency training for staff collecting patient demographic data on race, ethnicity, sexual orientation, and gender identity. It specifically prohibits collecting sexual orientation or gender identity data for patients under 18 unless the minor or their parent/guardian voluntarily provides it for medical treatment only. Hospitals and labs must electronically record these demographics using standardized categories (e.g., "gay/lesbian" for sexual orientation, "transgender male-to-female" for gender identity) and report the data to the state health department for disease surveillance. The bill directly affects healthcare providers in New Jersey who handle patient records, ensuring consistent, sensitive data collection practices while protecting minors' privacy.
This resolution establishes the Assembly Select Committee on COVID-19 Contact Tracing Data Privacy to examine how personal data collected through contact tracing during the pandemic is handled. The committee, made up of nine Assembly members (five appointed by the Speaker, four by the Minority Leader), will study data collection, storage, usage, and privacy safeguards to balance public health needs with individual privacy rights. It must submit findings and recommendations within 60 days of organizing, with the resolution ending 30 days after the report is delivered. The committee’s work will inform potential future policies on protecting contact tracing data privacy.
This bill prohibits all New Jersey state employees, agencies, and state contractors from downloading or using the TikTok app or visiting its website on any state-issued or state-leased electronic device (including phones, computers, and tablets). It directly affects state workers and contractors who use government-provided technology, with exceptions for law enforcement using TikTok during investigations under guidelines set by the Attorney General. The bill aims to address security concerns raised by the FBI regarding TikTok's data collection practices and potential access by Chinese entities under Chinese law. The prohibition takes immediate effect upon enactment.
This bill creates a new Office of Information Privacy within New Jersey's Department of Community Affairs to manage home address privacy for specific public officials. It exempts the home addresses of judicial officers, law enforcement officers, child protective investigators, prosecutors, and their immediate family members from standard public record redaction rules. The office will operate a secure portal allowing authorized representatives (like family members or legal guardians) to request or revoke address privacy, with clear processes for handling these requests and exceptions. This changes how home addresses appear in public records for these covered groups, balancing privacy needs with access for election officials, legal challenges, and other specified circumstances. The bill is currently in the introduction stage (2026-01-13).
This bill establishes the New Jersey Artificial Intelligence Advisory Council to study how state agencies use artificial intelligence and provide recommendations for ethical, safe implementation. The council, composed of the state's Chief Technology Officer, two legislative members (appointed by chamber leaders with party balance), and two public AI experts (appointed by the Governor), will assess AI's benefits and risks, develop guidelines to prevent biased decision-making and protect data privacy, and recommend best practices for state agencies. The council must submit a final report to the Governor and Legislature within one year of its first meeting and then dissolve. This directly affects state agencies that will use the council's guidance for AI procurement and implementation.
This bill expands "Daniel's Law" to protect the personal information of municipal court administrators and deputy court administrators, alongside existing protections for judges, law enforcement officers, child protective investigators, and prosecutors. It prohibits posting or sharing home addresses or unpublished phone numbers online - except for authorized purposes - by requiring a 10-day notice to stop disclosure and imposing penalties for violations (up to a third-degree crime for intentional sharing). The law specifically covers these officials' immediate family members living in the same household. News media is exempt from liability for previously published information, and the law clarifies that existing protections for information received under prior legislation remain in effect.
This bill requires businesses that collect or handle personal information of New Jersey residents (such as Social Security numbers, driver's license details, or financial account data) to create and maintain written information security programs. These programs must include risk assessments, employee training, secure data storage policies, and oversight of third-party service providers. Businesses must implement administrative, technical, and physical safeguards tailored to their size, resources, and the data they handle. The law aims to prevent security breaches that could lead to identity theft or fraud for New Jersey residents.
This bill amends New Jersey's data breach law to require businesses and public entities to disclose security breaches involving geolocation data. It adds "geolocation" (the location of an individual determined by electronic devices like phones or tablets) to the legal definition of "personal information," which already includes Social Security numbers and financial account details. Under the change, if a breach compromises geolocation data, the entity must notify affected consumers, just as they currently must for other personal information breaches. This expands existing disclosure requirements to cover location data collected by apps, services, or devices.
