Bill > A3590

Introduced Session

This bill revises the "Identity Theft Prevention Act," P.L.2005, c.226 (C.56:11-44 et al.) to provide that, in the event of any breach of security of computerized records, the disclosure to a customer whose personal information was breached shall be made within five business days, except as is consistent with the legitimate needs of law enforcement, or any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. Current law requires that the disclosure be made in the most expedient time possible and without unreasonable delay, which is not changed under the bill. Current law also provides that disclosure of a breach of security to a customer shall not be required if the business or public entity establishes that misuse of the information is not reasonably possible. The bill clarifies that this determination can only be made after an appropriate investigation by the business or public entity and consultation with relevant federal, State and local agencies responsible for law enforcement.

Committee Categories

Sterley Stanley (D)*,  Britnee Timberlake (D)*, 

Introduced, Referred to Assembly Consumer Affairs Committee (on 02/25/2020)

Official Document