New Jersey Proposes New Privacy Rules That Would Impact Compliance

On June 2, the New Jersey Division of Consumer Affairs (Division) published proposed regulations to implement the New Jersey Data Privacy Act (NJDPA). Of note, these rules were proposed months after the NJDPA went into effect on January 1, 2025. Comments are due August 1, 2025.

The proposal, if adopted, would address definitions and exemptions under the NJDPA, as well as consumer rights and obligations of controllers and processors under the law. The stated purpose of the proposed rules is "to implement the provisions [of the NJDPA]," see Proposed N.J.A.C. 1345L-1.1(a), but the proposed rules feature several notable distinctions from the statute itself that, if adopted, could affect business compliance strategies.