New Jersey Data Privacy Act

New Jersey's comprehensive consumer privacy law gives residents rights to confirm, access, correct, delete and port their personal data and to opt out of targeted advertising, sale, and significant-decision profiling. It requires consent for processing sensitive data and for targeted advertising, sale, or profiling of known 13-to-16-year-olds, and requires data protection assessments for high-risk processing. A January 2026 amendment (P.L.2025, c.367) added exemptions and a HIPAA-based de-identification standard, and a June 2026 amendment (P.L.2026, c.25) flatly bans the sale of sensitive data by anyone.