Bill > A5017

This bill amends existing data privacy law to provide exemptions for certain types of personal information and entities from specific notification and disclosure requirements. The bill specifically exempts protected health information governed by HIPAA (Health Insurance Portability and Accountability Act), financial institutions regulated by the Gramm-Leach-Bliley Act, insurance institutions, motor vehicle commission data sales permitted under federal law, consumer reporting agency data, state and local government agencies, research conducted under specific federal human subject protection guidelines, insurance-support organizations, and national securities associations. The bill also updates definitions related to personal data, including terms like "biometric data," "consent," "de-identified data," and "sensitive data." Key modifications include clarifying what constitutes a "sale" of personal data, expanding definitions of protected information categories, and providing more precise language about data processing and consumer rights. The changes aim to provide more clarity and specificity in how personal data can be collected, used, and shared while offering protections for consumers and recognizing existing federal and state regulatory frameworks.

Business and Industry

https://www.njleg.state.nj.us/bill-search/2024/A5017