NJ S2316

Data brokers operating in New Jersey must register annually with the Division of Consumer Affairs and pay a $100 registration fee, with the Division maintaining a public registry of all registered data brokers.

Registered data brokers must disclose their contact information, opt-out policies, purchaser credentialing processes, data breach history, and specific practices related to collecting information on minors under age 18.

Data brokers are prohibited from selling, licensing, or transmitting any physical health records or behavioral health records that identify individuals as having health conditions or receiving treatment.

Civil penalties of $50 per day apply for failure to register or submit required information, while violations involving health records carry a $1,000 penalty per record sold or transmitted.

Financial institutions subject to the Gramm-Leach-Bliley Act and businesses whose data collection is incidental to activities like e-commerce platforms or 411 directory services are exempt from data broker classification.