NJ A1419

Requires health care providers, mobile application developers, and third parties to obtain explicit consent before acquiring biometric data, health data, or protected health information from New Jersey residents through in-person, phone, app, website, or wearable device communications.

Mandates separate consent no more than three calendar days before each disclosure of personal health information to third parties, with every disclosure requiring its own distinct authorization.

Exempts health care providers sharing information with other providers for medical treatment or diagnosis purposes, and preserves all existing HIPAA rights and obligations.

Establishes a private right of action with damages of $1,000 per violation, plus reasonable attorney's fees and court costs.

Defines covered biometric data to include heart rate, blood type, menstrual/ovulation cycles, sleep patterns, fingerprints, voice prints, and retina/iris images.