New Jersey Data Protection Act

New Jersey Data Protection Act (SB 332, P.L. 2024, c.9)
New Jersey · P.L.2024, c.9 (N.J. SB 332)

Status
In effect
Took effect
January 15, 2025
Applies to
Controllers/processors meeting thresholds operating in or targeting NJ
Enforced by
New Jersey Attorney General (Division of Consumer Affairs)

New Jersey's comprehensive privacy law grants residents rights to access, correct, delete, and port personal data and to opt out of data sales and targeted advertising. Controllers must get opt-in consent for sensitive data (health, biometric, precise location) and honor universal opt-out signals since July 2025.

Who is protected: New Jersey residents

Legal detail

N.J. SB 332 (P.L.2024, c.9), eff. Jan. 15, 2025; applies at 100,000-consumer or 25,000/revenue thresholds; universal opt-out mechanism required July 15, 2025; AG enforcement up to $10,000 per violation, 30-day cure for first 18 months.

Key facts

JurisdictionNew Jersey
LevelState
StrengthLimited
EnactedJanuary 16, 2024
CitationP.L.2024, c.9 (N.J. SB 332)
Private right of actionNo, agency enforcement only
PenaltiesUp to $10,000 per violation; injunctive relief
Topicsconsumer data privacy · consumer protection · automated decision-making · data retention
Bill textSenate Bill 332 — New Jersey Legislature

More AI rules in New Jersey

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.