NJ Governor Passes Data Privacy Act

The law also gives consumers certain rights with respect to personal data, including the right to confirm whether a controller accesses and processes their personal data access, the right to correct, the right to delete, the right to obtain a portable copy, and the right to opt out of processing for certain purposes. “Personal data” is defined as “any information that is linked or reasonably linkable to an identified or identifiable person,” but excludes de-identified data or publicly available information. Additional protections apply to “sensitive data,” which is defined as “personal data revealing racial or ethnic origin; religious beliefs; mental or physical health condition, treatment, or diagnosis; financial information, which shall include a consumer’s account number, account log-in, financial account, or credit or debit card number, in combination with any required security code, access code, or password that would permit access to a consumer’s financial account; sex life or sexual orientation; citizenship or immigration status; status as transgender or non-binary; genetic or biometric data that may be processed for the purpose of uniquely identifying an individual; personal data collected from a known child; or precise geolocation data.”

The law will become effective on January 15, 2025 and grants authority to the New Jersey Director of the Division of Consumer Affairs in the Department of Law and Safety to promulgate rules and regulations necessary to implement the law.

Click Here to read the entire February 2024 Healthcare Law Update now!