HomeLegal DirectoryNew Jersey Data Protection Act

In effect Limited protection

New Jersey Data Protection Act (SB 332, P.L. 2024, c.9)

New Jersey · P.L.2024, c.9 (N.J. SB 332)

New Jersey's comprehensive privacy law grants residents rights to access, correct, delete, and port personal data and to opt out of data sales and targeted advertising. Controllers must get opt-in consent for sensitive data (health, biometric, precise location) and honor universal opt-out signals since July 2025.

Technical detail

N.J. SB 332 (P.L.2024, c.9), eff. Jan. 15, 2025; applies at 100,000-consumer or 25,000/revenue thresholds; universal opt-out mechanism required July 15, 2025; AG enforcement up to $10,000 per violation, 30-day cure for first 18 months.

Who is protected: New Jersey residents

Who must comply: Controllers/processors meeting thresholds operating in or targeting NJ

Key facts

JurisdictionNew Jersey
LevelState
StatusIn effect
Protection strengthLimited protection
Effective date2025-01-15
Enacted2024-01-16
CitationP.L.2024, c.9 (N.J. SB 332)
Enforced byNew Jersey Attorney General (Division of Consumer Affairs)
Private right of actionNo — agency enforcement only
PenaltiesUp to $10,000 per violation; injunctive relief
Topicsconsumer data privacy · consumer protection · automated decision-making · data retention
Last verified2026-06-12
Official sourceSenate Bill 332 — New Jersey Legislature ↗

More AI rules in New Jersey

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.