Does New Jersey have a comprehensive privacy law? Yes. The New Jersey Data Privacy Act (P.L.2023, c.266), approved January 16, 2024, has been in effect since January 15, 2025.
- Status: In Effect
- Law: New Jersey Data Privacy Act (S332, 2022-2023 session; P.L.2023, c.266; N.J.S.A. 56:8-166.4 et seq.)
- Signed: January 16, 2024 · Effective: January 15, 2025
- Applies to: Controllers that conduct business in New Jersey or produce products or services targeted to New Jersey residents and that, during a calendar year, control or process personal data of at least 100,000 consumers (excluding data processed solely to complete a payment transaction), or at least 25,000 consumers while deriving revenue, or receiving a discount on goods or services, from the sale of personal data
- Cure period: 30 days after a notice from the Division of Consumer Affairs, where a cure is deemed possible; this applied only until July 1, 2026
- Enforcement: New Jersey Attorney General (sole and exclusive authority); violations are unlawful practices under the Consumer Fraud Act (N.J.S.A. 56:8-1 et seq.); no private right of action
- Last verified: November 4, 2026 · Official source: P.L.2023, c.266 (New Jersey Legislature)
- Related: New Jersey Privacy Act guide · State privacy laws that took effect in 2025
New Jersey’s comprehensive privacy law began as Senate Bill 332 and was approved on January 16, 2024, as P.L.2023, chapter 266. It took effect on January 15, 2025, the 365th day after enactment. It gives consumers rights over their personal data, requires controllers to publish a clear privacy notice, and makes any violation an unlawful practice under the state’s Consumer Fraud Act, enforced only by the Attorney General.
The Division of Consumer Affairs proposed implementing rules (N.J.A.C. 13:45L) in the New Jersey Register on June 2, 2025, but no rules had been adopted when the proposal expired on June 2, 2026. On June 30, 2026, New Jersey amended the law with P.L.2026, chapter 25 (A5328), which adds a data broker registration requirement; the Division says the registry will open in spring 2027. For details, read our New Jersey Privacy Act guide.