News Stories

On June 30, 2026, in New Jersey A5328 and identical bill S2316  as amended were signed by the Governor.  The new law is aimed at regulating data brokers, data collectors, and collection and dissemination of certain sensitive information.

New Jersey Governor Mikie Sherrill signed Bill A5328 into law on June 30, 2026. The sweeping legislation tightly regulates data brokers and “data collectors,” establishes a public registry, and outright bans the sale or licensing of sensitive personal data such as precise geolocation, health records, and biometric data.

For further details on how these restrictions impact businesses and consumers, the New Jersey Governor’s Office press release.

The bills passed both houses (56-18-1).The Senate Budget and Appropriations Committee reports favorably and with committee amendments a Senate Committee Substitute for Senate Bill Nos. 2316.

As amended by the committee, the substitute bill prohibits a controller of a commercial Internet website or online services from selling sensitive data, which prohibition will apply to all individuals or legal entities regardless of the number of consumers whose data the individual or entity controls or processes.

Under the bill, the Division of Consumer Affairs in the Department of Law and Public Safety (division) is to establish and maintain a public registry of “data brokers” and “data collectors,” as these terms are defined in the bill, engaged in processing personal data of New Jersey consumers. The registry is to include, at a minimum, for each data broker and data collector: the data broker’s or data collector’s name and physical address; a general email address that may be used to request information about the data broker’s or data collector’s privacy policies and data collection practices; a general Internet website address for the data broker or data collector; an Internet website address specific to the data broker’s or data collector’s privacy policies; and any relevant opt-out information.