Technology (Data Privacy) in New Jersey

in committee · New Jersey · Senate Jan 13, 2026

S 2321: Requires rental car company to delete personal information of customer from motor vehicle computer system upon return of vehicle.

This bill requires rental car companies in New Jersey to delete renters' personal information (such as navigation history, phone data, or garage door codes) from vehicle computer systems when a rental vehicle is returned. Rental companies must use NIST-approved data-clearing methods or factory resets to erase this data. Violations carry civil penalties of $500 for a first offense and $1,000 for subsequent offenses, enforced by the Division of Consumer Affairs. The bill directly affects renters whose data is stored in rental vehicles and rental companies operating in New Jersey.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 2969: Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.

S 2969 establishes strict privacy protections for sensitive health data in New Jersey, directly affecting residents whose health information is collected within the state and the healthcare providers or entities handling that data. The bill requires explicit, opt-in consent for collecting health data (prohibiting "deceptive designs" or broad terms of service), mandates secure authentication for data requests, and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to healthcare visits. It prohibits selling or sharing this data without consent and creates mechanisms for consumers to access or delete their information. The law excludes data used in approved research by institutional review boards, focusing on protecting personal health information from misuse by commercial entities.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Women's Health Consumer Data Protection Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 2549: Prohibits State from disclosing New Jersey driver's license holders' personal information to other states seeking to issue speed camera or red light camera citations.

This bill (S 2549) prohibits New Jersey from sharing driver license holders' personal information - such as names, addresses, license numbers, or photos - with other states or interstate data networks. It specifically blocks disclosure when another state seeks to issue fines for violations captured by speed cameras or red light cameras (traffic control signal monitoring systems) in that state. The bill defines key terms like "personal information" and "speed control device" to clarify its scope. If passed, it would prevent New Jersey from enabling out-of-state ticketing for camera-detected traffic violations by withholding driver data. The bill is currently pending in the Senate Transportation Committee.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 1633: Requires State blanks, forms, documents, and applications to incorporate new standards for collection of information about sex, gender, gender identity, and sexual orientation.

New Jersey's S 1633 requires all state agencies to update public forms, applications, and documents to collect optional demographic data on sex, gender identity, gender, and sexual orientation. The bill mandates that these questions be clearly marked as voluntary, use sensitive language that accommodates non-binary identities, and avoid conflating sex with gender. Individuals (or their parents/guardians for minors) retain full control over whether to provide this information, with no state employee or third party allowed to deny services based on non-disclosure. This applies to all state forms currently used for official business, aiming to modernize data collection practices that previously lacked inclusivity for LGBTQ+ individuals.

Topics ✓ Technology

Sub-Topics Data Privacy

died · New Jersey · Senate Jan 13, 2026

S 2956: Exempts certain personal information and entities from certain requirments concerning notification and disclosure of personal data.

This bill (S 2956) exempts specific entities and types of personal data from New Jersey's privacy law requirements regarding notification and disclosure of personal data. It directly affects covered entities like healthcare providers under HIPAA, financial institutions under the Gramm-Leach-Bliley Act, insurance companies, state agencies, consumer reporting agencies, and research organizations conducting federally compliant studies. Key provisions remove obligations for these entities to notify consumers or disclose data when handling information already regulated by federal law (e.g., health data under HIPAA, financial data under Gramm-Leach-Bliley, or credit data under FCRA). The bill was withdrawn on January 13, 2026, as it was already enacted as P.L.2025, c.367.

Topics ✗ Technology

Sub-Topics Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 996: Prohibits soliciting or phishing for personal identifying information.

New Jersey's S 996 makes it a misdemeanor to trick people into sharing personal details like Social Security numbers, credit card info, or biometric data for identity theft. The bill prohibits soliciting or requesting such information with the intent to steal identities, defraud, or harm others. It uses a broad definition of "personal identifying information" covering names, addresses, account numbers, and unique identifiers like fingerprints. Violations carry penalties of up to six months in jail, a $1,000 fine, or both. The law directly targets scammers and fraudsters attempting to exploit personal data.

Topics ✓ Criminal Justice ✓ Technology

Sub-Topics Corrections Consumer Data Protection Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 1902: Prohibits posting, publishing on the Internet, or disclosing certain information regarding military personnel.

This bill prohibits posting or publishing on the Internet the home address or unpublished home telephone number of active-duty U.S. military members, New Jersey National Guard members, or their spouses/children. It makes reckless violations a fourth-degree crime (up to 18 months in prison or $10,000 fine) and purposeful violations a third-degree crime (3-5 years in prison or $15,000 fine). Government agencies must obtain written consent before posting such information, and businesses/individuals who disclose it under circumstances risking harassment face civil liability, including minimum $1,000 per violation in damages. The law directly affects military families and entities handling their personal data online.

Topics ✓ Technology

Sub-Topics Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 1354: Requires controller or processor to de-identify personal data and prohibits re-identification of de-identified data.

This New Jersey bill (S 1354) requires businesses that collect personal data (called "controllers" or "processors") to permanently remove identifying information from that data so it cannot be linked to specific people. It specifically prohibits these businesses from attempting to re-link de-identified data back to individuals or devices. To comply, businesses must take reasonable steps to ensure data cannot be traced to a person, publicly commit to keeping it de-identified, and require any third parties receiving the data to follow the same rules. This directly affects companies handling personal data in New Jersey, including data brokers and digital services.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy Digital Government

in committee · New Jersey · Senate Jun 30, 2026

S 2316: Regulates data brokers, data collectors, and collection and dissemination of certain sensitive information.**

This bill requires data brokers operating in New Jersey to register with the Division of Consumer Affairs annually ($100 fee) and submit detailed information about their data collection, privacy policies, opt-out options, and data breach history. It directly affects businesses that collect and sell personal identifying information without a direct relationship to the individual, such as those selling health data. The key provision bans data brokers from selling, sharing, or transmitting physical health records (covering treatments for physical conditions) or behavioral health records (covering mental health, substance use, or emotional disorder care). The law establishes a public registry of registered brokers to increase transparency about how sensitive health data is handled.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Mental Health Consumer Data Protection Cybersecurity Data Privacy

in committee · New Jersey · Senate Jan 13, 2026

S 1941: Exempts personal identifying information of minor from disclosure in public record; requires information to be redacted.

This bill requires government agencies in New Jersey to redact specific personal details - such as name, address, social security number, and email - from public records when the information pertains to minors. It directly affects minors whose personal data appears in government records (e.g., licensing applications, administrative files) and the agencies responsible for maintaining those records. The key mechanism mandates that agencies must remove these identifiers before making records publicly accessible, aligning with existing confidentiality protections for sensitive information. The bill amends New Jersey’s public records law to explicitly exempt minors’ personal details, ensuring their information is not disclosed in routine public access. This change applies broadly across all government agencies, not limited to specific contexts like hunting licenses.

Topics ✓ Technology

Sub-Topics Data Privacy

All technology bills