NJ S2956

Exempts insurance-support organizations and national securities associations registered under the Securities Exchange Act of 1934 from New Jersey's consumer data notification and disclosure requirements under P.L.2023, c.266.

Adds exemption for information treated like protected health information when collected, used, or disclosed by HIPAA-covered entities in accordance with HIPAA's privacy protections and security safeguards.

Exempts human subjects research conducted in accordance with good clinical practice guidelines issued by The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use from disclosure requirements.

Expands the definition of "de-identified data" to include data de-identified under HIPAA requirements (45 C.F.R. Part 164) when recipients are contractually prohibited from attempting to reidentify the data.

Amends New Jersey's 2023 consumer privacy law (P.L.2023, c.266) to broaden existing exemptions for entities already subject to federal privacy regulations.