NJ A513

Internet service providers (ISPs) in New Jersey must keep subscribers' personally identifiable information confidential unless the subscriber provides express written authorization to disclose it.

Personally identifiable information includes name, address, geolocation, social security number, phone number, website browsing history, online service usage, and contents of communications or data-storage devices.

ISPs must provide written notice of these privacy requirements to each subscriber and cannot refuse service to subscribers who decline to authorize disclosure of their information.

Disclosure exceptions apply for ordinary business activities (debt collection, order fulfillment, request processing, ownership transfers) and investigations under the New Jersey Wiretapping and Electronic Surveillance Control Act.

Violations constitute an unlawful practice under New Jersey's Consumer Fraud Act, and any waiver agreements that do not comply with the law are void and unenforceable.