Jurisdiction

New Jersey privacy and AI laws

Regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

New Jersey NJDPAComprehensive consumer privacy law with access, correction, deletion, portability and opt-out rights, opt-in consent for sensitive data, consent for targeted advertising/sale/profiling of known 13-17 year olds, universal opt-out signal support and data protection assessments. It has no revenue-share floor for the smaller threshold, and the Division of Consumer Affairs has rulemaking authority. A June 2026 law (A5328) bans selling sensitive data and creates a data broker registry.In effect since Jan 15, 2025

Past deadlines

EnforcementJul 1 · 4 months ago · Source

Mandatory 30-day cure period expiresThe Division's duty to issue a cure notice before enforcement ends on the first day of the 18th month after the effective date (N.J.S.A. 56:8-166.17(b)).

Takes effectJun 30 · 4 months ago · Source

A5328 sensitive data sale ban takes effectA5328, signed June 30, 2026, prohibits selling sensitive personal data; the ban took effect on signing.

ComplianceJul 15, 2025 · 15 months ago · Source

Universal opt-out mechanism must be honoredControllers that sell personal data or process it for targeted advertising must honor user-selected universal opt-out signals within six months of the effective date (N.J.S.A. 56:8-166.11).

Transition endsJun 2, 2025 · 17 months ago · Source

Division of Consumer Affairs proposes NJDPA rules (N.J.A.C. 13:45L)Proposed rules published at 57 N.J.R. 1101(a); comments were due Aug 1, 2025.

Takes effectJan 15, 2025 · 21 months ago · Source

NJDPA takes effectThe act takes effect on the 365th day after enactment on Jan 16, 2024 (sec. 17).