NJ A2184

Requires data brokers doing business in New Jersey to register annually with the Division of Consumer Affairs and pay a $100 registration fee, with the division maintaining a public registry of all registered data brokers

Mandates data brokers submit detailed information including their contact details, opt-out policies, data breach history, credentialing processes for data purchasers, and specific practices regarding data of individuals under age 18

Prohibits data brokers from selling, licensing, or transmitting any physical health records or behavioral health records, including information identifying individuals as having health conditions or receiving treatment

Imposes civil penalties of $50 per day for failure to register, pay fees, or submit required information, and $1,000 per record for violations of the health record prohibition

Exempts certain businesses from the data broker definition, including financial institutions subject to the Gramm-Leach-Bliley Act and businesses that only collect/sell data incidentally to activities like maintaining e-commerce platforms or providing directory assistance