New Jersey Enacts Law Establishing Data Broker Registration Regime and Imposing Prohibitions on Sensitive Data Sales - JD Supra
New Jersey has enacted a law requiring data brokers to register with the state and imposing prohibitions on the sale of sensitive data, expanding compliance obligations for businesses handling consumer data.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 21, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating in or collecting data from New Jersey residents. should confirm how it applies to their specific situation before acting. There is a time constraint attached: The law takes effect immediately; registration deadlines and enforcement dates are pending but businesses should act promptly to avoid penalties.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New Jersey now requires data brokers to register with the state and prohibits the sale of sensitive data (e.g., health, financial, biometric, geolocation) without explicit consent, similar to other state privacy laws like the CCPA/CPRA.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating in or collecting data from New Jersey residents.
What you must do
Determine if your business qualifies as a data broker under the new law, register with the New Jersey Division of Consumer Affairs, and implement measures to restrict the sale of sensitive data.
Deadline
The law takes effect immediately; registration deadlines and enforcement dates are pending but businesses should act promptly to avoid penalties.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- New Jersey’s New Data Privacy Rules: What Organizations Need to Know - Freshfields
- US-CONGRESS BILLS-119hr9757ih: Conversational AI Services Act
- DROP is Coming Due: What California’s Delete Act Means for Data Brokers in August - JD Supra
- New Louisiana Data Privacy Act Set to Take Effect in 2027 - The National Law Review
- Green Mountain State Joins in State Privacy Effective 2028 - The National Law Review