Requires certain persons and business entities to maintain comprehensive information security program.

This New Jersey bill (A2453) requires businesses that handle personal data of state residents to implement written security programs. It applies to any company owning or licensing names combined with Social Security numbers, driver's license numbers, or financial account details of New Jersey residents. Key requirements include encrypting data in transit and on devices, conducting annual risk assessments, providing employee security training, and maintaining secure access controls. Violations may result in fines up to $20,000 per incident under the Consumer Fraud Act.