New Jersey Data Protection Act: What Businesses Need to Know
Lexology February 13, 2024
On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law. The New Jersey law will go into effect on January 15, 2025.
The NJPA is similar to other state privacy laws such as the Connecticut Data Privacy Act (CTDPA) and Colorado Privacy Act (CPA), demanding more from companies then the more business-friendly Utah Consumer Privacy Act (UCPA) and Iowa Consumer Data Protection Act (ICPA).
Key Provisions
- Controller Requirements – obligations for controllers include: data minimization, data security, opt in consent for sensitive data, nondiscrimination, mechanism to revoke consent, opt in consent for...