Requires controller or processor to de-identify personal data and prohibits re-identification of de-identified data.

This New Jersey bill (S 1354) requires businesses that collect personal data (called "controllers" or "processors") to permanently remove identifying information from that data so it cannot be linked to specific people. It specifically prohibits these businesses from attempting to re-link de-identified data back to individuals or devices. To comply, businesses must take reasonable steps to ensure data cannot be traced to a person, publicly commit to keeping it de-identified, and require any third parties receiving the data to follow the same rules. This directly affects companies handling personal data in New Jersey, including data brokers and digital services.