NJ A2079

Requires businesses and public entities to notify New Jersey customers of data breaches through written or electronic notice only, eliminating the current "substitute notice" option for large-scale breaches

Mandates breach notifications include a toll-free number with a customer representative who can explain what information was compromised, how the breach is being addressed, and steps customers can take to protect themselves

Requires businesses and public entities to provide affected customers with free monthly credit reports from a consumer reporting agency for 12 months following a breach

Makes third-party entities that compile or maintain computerized records responsible for reimbursing the primary business or public entity for notification costs and credit report fees when a breach occurs on the third party's systems

Takes effect on the first day of the third month following enactment