Privacy Map

New Jersey. Comprehensive data protection. Act

NJDPANew Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.)

In force
Partly verifiedMedium confidence. Final rule status not confirmed. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.

§1Summary

Synopsis

Comprehensive law with standard rights and opt-outs, rulemaking authority for the Division of Consumer Affairs, and a broad definition of sensitive data including financial information.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
  • rulemaking
  • minors 13–17 consent for targeted ads
Unique features

No revenue-share floor for the sale threshold; covers financial account data as sensitive; regulator rulemaking.

SaaS relevance

Applies at 100,000 New Jersey consumers, or 25,000 where the business derives any revenue or discount from sales.

§2Obligations

Extraterritorial
Yes
Breach notification
See N.J.S.A. 56:8-163 (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
Up to $10,000 first violation, $20,000 subsequent

§3Dates

Key dates
  • Adopted
  • In force
  • Division of Consumer Affairs proposed implementing rules in 2025; 30-day cure available until 2026-07-15.

§4Text and authority

Text
Authority
New Jersey Division of Consumer Affairs / Attorney General

§5Where it applies

Domestic law of
New Jersey

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Final rule status not confirmed. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.