WeVote
Log In

Bill

Bill

A 5332

Regulates data brokers and collection and dissemination of certain sensitive information.

2026-2027 Regular Session

The bill regulates data brokers by requiring transparency, rights for individuals over sensitive data, and stronger oversight, enforcement, and security measures.

0
WeVote Research Nonpartisan
Bill Summary · A 5332

Summary of Bill A-5332 (Session 222, New Jersey)

Purpose and intent

  • A-5332 aims to regulate data brokers and the collection, use, and dissemination of certain sensitive information. The bill seeks to increase transparency, protect individuals’ privacy, and impose standards and potential enforcement mechanisms on entities that collect and sell or share personal data.

Key provisions and changes

  • Definition of data broker and sensitive information: The bill clarifies what constitutes a data broker and identifies categories of sensitive information that may be subject to additional protections (e.g., biometric data, financial information, health information, and other highly personal identifiers).
  • Registration or registration-like requirements: Data brokers operating in or affecting New Jersey residents may be required to register with a state authority or otherwise comply with a registration scheme, including providing information about data practices, purposes, and governance.
  • Disclosure and transparency obligations: Data brokers must disclose to individuals when their data is collected, sold, or shared, and provide clear information about the categories of data collected, purposes of use, and the third parties with whom data is shared.
  • Consumer rights and access: Individuals may have rights to access their data held by data brokers, request corrections, and request deletion or suppression of data in certain circumstances.
  • Consent and limitations on processing: The bill may impose limits on processing sensitive information without explicit consent, or establish stricter consent requirements for targeted advertising, profiling, or other sensitive-use scenarios.
  • Security and data minimization: Data brokers could be required to implement reasonable security measures and minimize the amount of sensitive data collected and retained.
  • Enforcement and penalties: Provisions for enforcement by a state agency, including penalties for non-compliance, potential administrative fines, and remedies for harmed individuals. The bill may also authorize investigations and rulemaking to interpret and enforce the provisions.
  • Notification of data breaches: Obligations to notify affected individuals and possibly state authorities in the event of a data breach involving sensitive information.
  • Record-keeping and audits: Data brokers may be obligated to maintain records of data practices and undergo audits or examinations to ensure compliance.

Who or what would be affected

  • Data brokers operating in New Jersey or handling data of New Jersey residents: Entities that collect, aggregate, analyze, purchase, or sell consumer data would be directly affected.
  • Businesses that rely on data broker services: Companies that purchase data or rely on data broker insights may be subject to new disclosures or verification requirements.
  • Individuals: New Jersey residents would gain certain rights to access, control, and be informed about how their sensitive data is collected and used, with potential remedies if rights are violated.

Procedural and timeline considerations

  • Effective dates and phased compliance: The bill typically includes effective dates after enactment, with potential phase-in periods to allow data brokers to come into compliance.
  • Rulemaking and guidance: May authorize or require the New Jersey Division of Consumer Affairs or a designated agency to draft regulations, provide enforcement guidelines, and issue interpretive notices.
  • Existing laws interplay: The bill likely interacts with other state privacy or consumer protection statutes, potentially harmonizing definitions and enforcement mechanisms or creating a separate regulatory framework for data brokers.

Potential impact and considerations

  • Gives New Jersey residents clearer visibility and control over data broker activities involving sensitive information.
  • Shifts compliance burden to data brokers, potentially increasing operating costs, privacy safeguards, and governance requirements.
  • Could affect marketing, credit services, and risk assessment industries that rely on consumer data aggregators.
  • May enhance enforcement against non-compliant entities and provide remedies for individuals harmed by misuse of data.

Note: This summary reflects the bill’s general scope and typical provisions for data-broker regulation. For precise language, exact definitions, deadlines, agency names, and enforcement details, consult the bill’s official text and any enacted amendments or committee reports.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.