WeVote

Bill

Bill

A 5354

Requires subscription service provider to delete consumer payment information after cancellation of subscription service.

2026-2027 Regular Session

The bill requires New Jersey subscription providers to delete all stored consumer payment information after a cancellation, with limited lawful retention exceptions.

0
WeVote Research Nonpartisan
Bill Summary · A 5354

Summary of Bill A-5354 (Session 222, New Jersey)

Purpose and intent

  • The bill requires subscription service providers to delete consumer payment information after a consumer cancels their subscription.
  • Its overarching goal is to protect consumer privacy and reduce the risk of ongoing or future unauthorized or unnecessary retention of payment data following cancellation.

Key provisions and changes

  • Scope: Applies to subscription service providers operating in New Jersey that collect and store consumer payment information (e.g., credit/debit card numbers, bank account details, digital wallet identifiers) as part of a cancellation-based workflows.
  • Post-cancellation deletion requirement: Upon cancellation of a subscription by a consumer, the provider must delete all stored consumer payment information associated with that subscription, unless retention is legally required or the consumer consents to retention for a defined purpose.
  • Retention exceptions (examples likely, contingent on exact language):
    • Information necessary to process refunds, reconcile accounts, or resolve outstanding billing disputes.
    • Information required to comply with other legal obligations (e.g., tax or financial reporting) or to fulfill fraud prevention/security measures.
    • Data retained with explicit ongoing consent from the consumer.
  • Notification and timelines: The bill may specify a maximum timeframe within which deletion must occur (e.g., within a certain number of days after cancellation) and may require written notice to the consumer confirming deletion or stating any lawful reasons for continued retention.
  • Security requirements: Providers may be required to implement reasonable security measures during any legally permissible retention period to protect retained payment data.
  • Audit and compliance: Potentially authorizes or requires regulatory oversight, annual reporting, or self-certification of compliance with the deletion requirements.
  • Enforcement and penalties: Violations could trigger penalties, fines, or consumer rights actions (e.g., private right of action or enforcement by the state attorney general or consumer protection bureau).

Who is affected

  • Subscription service providers operating in New Jersey that collect and store consumer payment information.
  • New Jersey consumers who subscribe to services and cancel, ensuring their payment data is deleted post-cancellation.
  • Indirectly, related businesses that process payments or provide ancillary services may need to align data retention practices with the bill’s requirements.

Procedural and timeline considerations

  • Effective date: The bill would specify when the deletion obligation takes effect (e.g., upon enactment or a future date after passage).
  • Phased implementation: If the bill allows a transition period, providers might have a defined window to come into full compliance.
  • Rulemaking or guidance: The bill may authorize or require the relevant state agency to issue rules or guidance clarifying definitions (e.g., “payment information,” “cancellation,” and acceptable retention exceptions).

Potential impact

  • Consumer privacy: Enhanced protection by reducing the duration payment data is stored after cancellation.
  • Security risk mitigation: Lower exposure to data breaches involving stale payment information.
  • Operational considerations for providers: Requires changes to data retention policies, deletion processes, and internal workflows; may entail costs for data erasure and compliance monitoring.
  • Industry implications: May influence best practices for other states considering similar protections.

Note: This summary reflects the bill’s central objectives and common elements expected in such legislation. For precise statutory language, definitions, exceptions, enforcement mechanisms, and any specified timelines, please refer to the official bill text and fiscal/legal analyses from the New Jersey Legislature.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.