Garden State New Jersey Sees Data Broker Law Quickly Bloom

If your business collects, buys, or sells customer data, add a new data broker law to your list. This one, in New Jersey (New Jersey's Assembly Bill 5328), had immediate effect when it was passed on June 30, 2026. New Jersey joins California, Texas, Oregon, and Vermont as states with laws aimed at data brokers.

Under the law, there are requirements for two types of businesses: data brokers and data collectors. A data broker is defined as those that collect or purchase personal data from New Jersey residents in their personal (household capacity) with whom the company has no direct relationship, and then sell or license that data to a third party. A data collector, on the other hand, is a business that gathers personal data directly from its own (New Jersey) customers and then sells or licenses that information to a data broker.