As organizations prepare for compliance with the New Jersey Data
Privacy Law (NJDPL), set to take effect on January 15, 2025, the
Division of Consumer Affairs (DCA) has released a set of 24
Frequently Asked Questions (FAQs) that provide important insights
and guidance on complying with New Jersey's robust regulatory
framework. The FAQs are not binding and should
not be considered a legal document or a complete explanation of the
law. Rather, they are useful as a reference for persons within the
entities covered by NJDPL that have a role in privacy
compliance.
The FAQs specifically focus on sensitive data, children's
data, opt-out or revocation of consent from sale of personal data
(including via universal opt-out signals), contracts with data
processors, and data protection assessments, indicating the New
Jersey DCA's focus areas for the enforcement of the incoming
law. This article explores the key takeaways from the FAQs,
particularly concerning the treatment of
