NJ S4259

Exempts insurance-support organizations and national securities associations registered under the Securities Exchange Act of 1934 from New Jersey's personal data privacy and disclosure requirements under P.L.2023, c.266

Expands HIPAA-related exemptions to include information treated like protected health information when used in accordance with HIPAA privacy protections and security safeguards

Adds exemptions for human subjects research conducted under good clinical practice guidelines issued by The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use

Clarifies that "de-identified data" includes data de-identified in accordance with 45 C.F.R. Part 164 requirements, provided recipients are contractually prohibited from attempting to reidentify the data

Amends the state's consumer privacy law (C.56:8-166.4 et seq.) originally enacted in 2023 to narrow the scope of entities and data types subject to notification and disclosure requirements