New Jersey, Connecticut Enact 2026 Data Broker Laws - State Affairs
New Jersey and Connecticut have enacted new data broker laws effective 2026, requiring registration, consumer opt-out mechanisms, and compliance with data minimization and risk assessment standards similar to CCPA/CPRA.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 14, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants operating in or serving residents of New Jersey and Connecticut. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Effective January 1, 2026; registration likely required by late 2025.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New laws impose registration requirements, mandatory consumer opt-out (including via Global Privacy Control), data minimization, and risk assessments for data brokers.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants operating in or serving residents of New Jersey and Connecticut.
What you must do
Register as a data broker in each state, implement universal opt-out mechanisms, conduct data mapping and risk assessments, and update privacy policies.
Deadline
Effective January 1, 2026; registration likely required by late 2025.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- NJ Delays Registry Aspect Of Newly Enacted Data Broker Law - Law360
- Delaware General Assembly Passes HB 380, an Amendment to the Delaware Personal Data Privacy Act - Inside Privacy
- Vermont Enacts Significant Amendments to Data Broker Legislation - Hunton Andrews Kurth LLP
- Connecticut Adopts Far-Reaching Amendments To Its Comprehensive Privacy Law - JD Supra
- Supreme Court won't block Texas from enforcing a law requiring age verification for app downloads - Spectrum News NY1