Processes de-identified data, in New Jersey

New Jersey Data Privacy Act, N.J. Stat. §§ 56:8-166.4 and 56:8-166.14 · Read the law's page

• To treat data as de-identified under NJDPA's general test, take reasonable measures to ensure that the data cannot be associated with an individual (P.L. 2023, c. 266, section 1, definition of "de-identified data").
• Publicly commit to maintain and use the data only in a de-identified fashion and not to attempt to re-identify it (P.L. 2023, c. 266, section 1, definition of "de-identified data").
• Contractually obligate any recipients of the data to comply with the requirements of the definition (P.L. 2023, c. 266, section 1, definition of "de-identified data").
• Alternatively, de-identify the data in accordance with the requirements in 45 C.F.R. Part 164 and contractually prohibit any recipients of that data from attempting to reidentify it (P.L. 2025, c. 367, section 2, definition of "de-identified data").