Lexology January 22, 2024
On January 16, 2024, New Jersey became the thirteenth state to enact a comprehensive data privacy law, named the New Jersey Data Privacy Act (the “NJDPA”).
The NJDPA, which will take effect on January 15, 2025, includes some provisions that are different from other data privacy laws, thereby requiring entities that fall within its scope to examine their compliance obligations with respect to those provisions.
Applicability and Scope
- Unlike California and Utah, but similar to most other state comprehensive data privacy laws, the NJDPA does not have a revenue threshold.
- The NJDPA applies to controllers that conduct business in New Jersey or produce products or services that are targeted to residents of New Jersey, and that during a calendar...