New Jersey Data Privacy Act (NJDPA)

Overview

The New Jersey Data Privacy Act (S332/A1971), signed into law on January 16, 2024, and effective January 15, 2025, establishes comprehensive consumer data privacy rights for New Jersey residents. The NJDPA applies to controllers that conduct business in New Jersey or produce products or services targeted to New Jersey residents and that during a calendar year either (a) control or process the personal data of at least 100,000 consumers (excluding data processed solely for completing a payment transaction), or (b) control or process the personal data of at least 25,000 consumers and derive revenue or receive a discount on the price of goods or services from the sale of personal data.

Key Provisions

Consumer Rights (Section 6)