Duty LXD-2467
Tracks devices, in New Jersey
Each law's tag says when it binds: since in force from , in 9 months not yet in force
Identity Theft Prevention Act, methods of destruction of customer recordssince 3 lines
N.J. Stat. Ann. § 56:8-162 (L. 2005, c.226, s.11) · Read the law's page
- This binds any business or public entity holding a customer's records containing personal information within its custody or control, whether or not the entity is otherwise subject to the New Jersey Data Privacy Act.
- Destroy, or arrange for the destruction of, a customer's records containing personal information once they are no longer retained, by shredding, erasing, or otherwise modifying the personal information to make it unreadable, undecipherable, or non-reconstructable through generally available means.
- A willful, knowing, or reckless violation is deemed an unlawful practice under the Consumer Fraud Act, enforceable by the Attorney General and, separately, by an affected consumer through the Consumer Fraud Act's private right of action for an ascertainable loss.
Data brokers and data collectors: no sale or licensing of sensitive data, with a civil penalty of $50,000 for each recordsince 3 lines
Data broker sensitive data ban, N.J. Stat. §§ 56:8-166.22 and 56:8-166.23 (P.L.2026, c.25, sections 3 and 5) · Read the law's page
- If you are a data broker or a data collector, do not sell or license sensitive data to any other individual or entity (N.J.S.A. 56:8-166.22(a)).
- Treat as sensitive data any personal data revealing racial or ethnic origin, religious beliefs, health condition, treatment or diagnosis, financial account information with its access code, sex life or sexual orientation, citizenship or immigration status, transgender or non-binary status, genetic or biometric data processed to uniquely identify an individual, personal data collected from a known child, and precise geolocation data within a radius of 1,750 feet (N.J.S.A. 56:8-166.20(a) and 56:8-166.22(a)).
- Check whether an exclusion applies before relying on it: the ban does not reach HIPAA protected health information, Gramm-Leach-Bliley financial institutions, insurance institutions and insurance-support organizations, consumer reporting agencies acting under the Fair Credit Reporting Act, the Motor Vehicle Commission's sales that the Driver's Privacy Protection Act permits, State agencies and political subdivisions, human subjects research, and registered national securities associations (N.J.S.A. 56:8-166.22(b)).
Fair Price Protection Act, surveillance pricing of groceries and other foodstuffsfrom , in 9 months5 lines
N.J. Stat. §§ 56:8-23.1 to 56:8-23.7 (P.L. 2026, c. 55) · Read the law's page
- Do not use surveillance pricing, or any other pricing strategy that determines or varies the sale price of groceries and other foodstuffs based, in whole or in part, on personal data.
- Surveillance pricing includes pricing of groceries and other foodstuffs that an algorithm or automated system determines, adjusts, optimizes, or recommends using personal data, including data derived or inferred from other data, where the result is price variation for individual consumers or groups of consumers, and pricing based on data collected through electronic surveillance technology such as sensors, cameras, device tracking, and biometric monitoring.
- You may still offer a different price on groceries and other foodstuffs based upon reasonable costs of providing them to different consumers, upon a bona fide discount whose eligibility conditions are disclosed and uniformly offered, or upon a bona fide discount offered as part of a loyalty program.
- Use personal data that you employ to offer a difference in price on those grounds for no other purpose without the consumer's consent.
- The act does not reach food or beverages sold by an establishment primarily engaged in preparing and selling food or beverages for immediate consumption.