This bill (S 1356) gives patients who use medical devices (like cardiac monitors) the right to access and share their health data collected by medical device companies. It requires New Jersey-based medical device companies to provide electronic access to this data, allowing patients (or parents/guardians for minors) to download it and authorize sharing with research institutions. The data must be shared in a way that complies with federal privacy laws like HIPAA, including removing personal identifiers before sharing. The bill specifically targets data from devices regulated by the FDA, excluding pharmaceuticals, and applies to companies operating in New Jersey.
This New Jersey bill (S 2479) allows parents or legal guardians to place a security freeze on a child's credit report. It directly affects minors under 18 (defined as "protected consumers") by giving their parents/guardians control over their credit information. The key provision requires credit reporting agencies to place a freeze within 5 business days of a written request from a parent/guardian, with agencies creating a new record for the child if none exists. The freeze prevents the agency from sharing the child's credit report without the parent/guardian's permission, though it doesn't stop the agency from notifying third parties that a freeze is active.
This New Jersey bill (S 2107) requires health care providers, health app developers, and third parties to obtain explicit consent before collecting or sharing residents' biometric data (like heart rate or fingerprints), health data (medical history or payments), or protected health information. It mandates a single initial consent for data acquisition but requires separate consent within three days for each disclosure to another party. Exceptions apply for medical treatment between providers, and the law does not override federal HIPAA protections. The bill was introduced in January 2026 and referred to the Senate Health Committee.
This New Jersey bill (S 1728) gives parents and guardians specific rights regarding their child's public school education. It requires schools to provide syllabi and reading lists at the start of each year, allow parents to review curricula and educational materials, and notify them about safety incidents near school (like assaults or weapons). Schools must also obtain written parental consent before collecting biometric data (like fingerprints), taking students on field trips, or using photos/videos of students. The bill directly affects all public school parents/guardians and school districts in New Jersey, with enforcement allowing legal action if rights are denied.
S 2969 establishes strict privacy protections for sensitive health data in New Jersey, directly affecting residents whose health information is collected within the state and the healthcare providers or entities handling that data. The bill requires explicit, opt-in consent for collecting health data (prohibiting "deceptive designs" or broad terms of service), mandates secure authentication for data requests, and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to healthcare visits. It prohibits selling or sharing this data without consent and creates mechanisms for consumers to access or delete their information. The law excludes data used in approved research by institutional review boards, focusing on protecting personal health information from misuse by commercial entities.
This bill requires vehicle manufacturers to provide owners and their authorized representatives (like mechanics) with real-time, free access to vehicle data such as speed, location, crash information, and brake performance. Owners can request this data in a machine-readable format without fees, decryption requirements, or needing manufacturer-provided tools. It directly affects vehicle owners seeking to access their own vehicle data for repairs, personal use, or safety verification. The law mandates that manufacturers share this data as collected by the vehicle's systems, excluding audio/video recordings.
New Jersey's S 996 makes it a misdemeanor to trick people into sharing personal details like Social Security numbers, credit card info, or biometric data for identity theft. The bill prohibits soliciting or requesting such information with the intent to steal identities, defraud, or harm others. It uses a broad definition of "personal identifying information" covering names, addresses, account numbers, and unique identifiers like fingerprints. Violations carry penalties of up to six months in jail, a $1,000 fine, or both. The law directly targets scammers and fraudsters attempting to exploit personal data.
This New Jersey bill (S 1354) requires businesses that collect personal data (called "controllers" or "processors") to permanently remove identifying information from that data so it cannot be linked to specific people. It specifically prohibits these businesses from attempting to re-link de-identified data back to individuals or devices. To comply, businesses must take reasonable steps to ensure data cannot be traced to a person, publicly commit to keeping it de-identified, and require any third parties receiving the data to follow the same rules. This directly affects companies handling personal data in New Jersey, including data brokers and digital services.
This bill requires data brokers operating in New Jersey to register with the Division of Consumer Affairs annually ($100 fee) and submit detailed information about their data collection, privacy policies, opt-out options, and data breach history. It directly affects businesses that collect and sell personal identifying information without a direct relationship to the individual, such as those selling health data. The key provision bans data brokers from selling, sharing, or transmitting physical health records (covering treatments for physical conditions) or behavioral health records (covering mental health, substance use, or emotional disorder care). The law establishes a public registry of registered brokers to increase transparency about how sensitive health data is handled.
S 2602, the New Jersey Disclosure and Accountability Transparency Act (NJ DaTA), would require businesses collecting personal data from New Jersey residents to obtain explicit opt-in consent before processing it. The law sets strict rules limiting data collection to specific purposes, mandating security measures, and requiring transparency about how data is used. It creates a new Office of Data Protection within the Division of Consumer Affairs to enforce these requirements. The bill is currently pending in the Senate Commerce Committee as of its January 2026 introduction.
