Share on LinkedInShare on LinkedIn

ARTICLE · 21 FEBRUARY 2024

New Jersey Data Protection Act: What Businesses Need To Know

Akin
Akin
Contributor
Akin

Akin

Akin is a global law firm with more than 1,100 lawyers and advisors who pride themselves on...

View firm profile
Explore more from Akin

On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law.

United StatesPrivacy

On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law. The New Jersey law will go into effect on January 15, 2025.

The NJPA is similar to other state privacy laws such as the Connecticut Data Privacy Act (CTDPA) and Colorado Privacy Act (CPA), demanding more from companies then the more business-friendly Utah Consumer Privacy Act (UCPA) and Iowa Consumer Data Protection Act (ICPA).

Key Provisions

  • Controller Requirements – obligations for controllers include: data minimization, data security, opt in consent for sensitive data, nondiscrimination, mechanism to revoke consent, opt in consent for child between the ages of 13 and 17, privacy notices, agreements with processors and data protection assessments.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from