Requires certain notifications and free credit reports for customers following breach of security of personal information within business or public entity.

This bill requires businesses and public entities that handle personal information of New Jersey residents to notify affected customers promptly after a security breach involving unauthorized access to their data. It mandates written or electronic notice within the "most expedient time possible," including details about compromised information and steps to protect accounts, while eliminating the current option for "substitute notice" (like website postings) for large-scale breaches. Businesses must also cover the cost of providing customers with free credit reports from consumer reporting agencies for six months following a breach, with payment for up to 12 months of reports. The law applies to any entity maintaining computerized records with NJ residents' personal data and requires prior reporting of breaches to the State Police before customer notification.