NJ A1401

Exempts insurance-support organizations and national securities associations (registered under the Securities Exchange Act of 1934) from New Jersey's consumer data notification and disclosure requirements under P.L.2023, c.266.

Adds an exemption for information treated like protected health information (PHI) when collected, used, or disclosed by HIPAA-covered entities in accordance with HIPAA privacy protections and security safeguards.

Exempts human subjects research conducted in accordance with good clinical practice guidelines issued by The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use.

Expands the definition of "de-identified data" to include data de-identified in accordance with HIPAA requirements (45 C.F.R. Part 164), provided recipients are contractually prohibited from re-identifying the data.

Takes effect immediately upon enactment.