This bill regulates how data brokers and collectors handle personal information in New Jersey by requiring them to limit data collection to what is necessary and obtain explicit consent before processing sensitive data or selling personal information. It mandates that companies implement strong security measures to protect data and provides consumers with an easy way to revoke their consent, which must be processed within 15 days. Additionally, the law requires organizations to conduct confidential data protection assessments for activities that pose a heightened risk of harm, such as targeted advertising or selling personal data, and prohibits processing personal data of children between the ages of 13 and 17 for advertising or profiling without consent.
This bill updates New Jersey's data privacy laws to impose stricter rules on companies that collect and sell personal information. It requires businesses to limit data collection to what is necessary, obtain explicit consent before processing sensitive information or using data for targeted advertising, and provide an easy way for people to revoke that consent. The legislation also mandates that organizations conducting high-risk processing activities must perform confidential data protection assessments to weigh potential benefits against consumer risks. Additionally, the law prohibits the sale of sensitive data by any entity and bans the processing of personal data in ways that violate state or federal anti-discrimination laws.
This bill repeals the Privacy Protection Act, which currently restricts New Jersey government agencies and healthcare facilities from collecting specific personal data such as immigration status, citizenship, and Social Security numbers. By removing these restrictions, the legislation allows these entities to gather and share such information more freely, particularly when it may assist law enforcement or administrative processes. The act also eliminates the prohibition on selling or sharing automated license plate recognition data, while simultaneously removing the requirement for agencies to develop compliance policies and the legal ability for private citizens to sue for violations. Ultimately, the bill shifts the legal framework to permit broader data collection without the previous privacy constraints.
This bill repeals the Privacy Protection Act, which currently restricts state and local government agencies and health care facilities from collecting specific personal data. The law being removed prohibits these entities from asking for information such as immigration status, citizenship, place of birth, Social Security numbers, or taxpayer IDs unless it is strictly necessary for administering public services or benefits. Additionally, the repealed statute banned the sale or sharing of automated license plate recognition data and required organizations to create compliance policies while allowing private lawsuits against violators. By eliminating these restrictions, the bill allows government entities and health care facilities to collect and share the specified personal information without the previous legal barriers.
This bill prohibits large online retailers, airlines, ticket brokers, and ride-sharing companies in New Jersey from using a consumer's personal data to set individualized prices. Specifically, it bans pricing strategies that rely on algorithms analyzing personal information or surveillance technologies like cameras and sensors to determine what a specific customer pays. The law allows businesses to continue offering standard discounts, loyalty rewards, and surge pricing based on supply and demand, but it makes it illegal to charge different prices to different people based on their private data or protected characteristics. Violations of these rules are treated as consumer fraud offenses, subjecting companies to fines, cease-and-desist orders, and potential treble damages for injured consumers.
This bill establishes rules for how employers and public service providers in New Jersey can use artificial intelligence and electronic monitoring tools to make decisions about hiring, firing, and providing services. It specifically defines these technologies, such as systems that analyze data to predict job performance or determine eligibility for public benefits, and sets requirements for their use. The legislation mandates that these systems must be regularly audited by independent experts to ensure they do not discriminate and that workers have access to information about how these tools affect their employment or services. Additionally, the bill clarifies what constitutes biometric data and outlines protections for employees regarding surveillance and data collection practices.
This bill creates a pilot program in New Jersey that allows some municipalities to let voters cast their ballots electronically during local elections. To participate, voters would use a secure system that lets them receive, mark, and return ballots online while maintaining strict data protection measures like encryption and identity verification. The state will hire a vendor to build this system, and local election officials will ensure there are backup plans in case the technology fails. The program is designed to run for eight years, with officials required to submit detailed reports on how well it works after each election.
This bill prohibits controllers of commercial websites and online services in New Jersey from selling sensitive personal data, such as financial information, health records, and biometric data. It applies to all individuals and legal entities regardless of the size of their consumer base and requires explicit consent before processing sensitive information. The law also mandates that companies implement strong data security practices and provides consumers with a clear mechanism to revoke consent within 15 days. Additionally, it requires data protection assessments for activities that pose a heightened risk of harm, including targeted advertising and data sales.
This bill prohibits businesses in New Jersey from using, selling, or distributing algorithmic devices that set prices for goods or services based on a consumer's personal data. It directly affects companies that use software to dynamically adjust prices for individual customers, such as online retailers or subscription services. The law defines an algorithmic device as any software program that uses algorithms to calculate prices using personal information linked to a specific consumer, while a consumer is defined as an individual acting in a personal or household context rather than a commercial one. Violations could result in civil penalties of up to $1,000 per incident, injunctive relief, restitution, and the Attorney General may recover legal fees if they prevail in court. The bill also amends existing state consumer protection laws to clarify definitions of terms like "personal data," "consumer," and "algorithmic device."
This bill establishes the New Jersey Children's Data Protection Commission and sets new privacy standards for social media platforms serving users under 18. It requires platforms to conduct Data Protection Impact Assessments before launching any online service, product, or feature likely to be accessed by children, documenting risks related to data management practices. The law defines "personal information" broadly to include names, addresses, device identifiers, photos, videos, and location data, while also prohibiting automated profiling of children based on their personal information. Social media platforms must comply with these requirements for any service that reasonably expects to be accessed by children, based on factors like marketing targeting, design elements appealing to youth, or audience composition data.
