Bill > S4259

This bill amends existing New Jersey data privacy legislation to expand exemptions for certain types of personal information and entities from notification and disclosure requirements. Specifically, the bill adds exemptions for additional types of organizations and data, including: information protected under HIPAA (Health Insurance Portability and Accountability Act), financial institutions regulated by the Gramm-Leach-Bliley Act, insurance institutions, consumer reporting agencies, research conducted under specific federal guidelines, insurance-support organizations, and national securities associations. The bill also clarifies and expands definitions of key terms like "biometric data," "consent," "de-identified data," and "sensitive data," providing more nuanced descriptions that specify what types of information are included or excluded from the law's purview. Additionally, the bill refines technical language around how personal data can be processed, shared, or sold, offering more precise guidelines about what constitutes acceptable data handling practices. The amendments aim to provide clearer protections for consumers while offering more specific guidance for organizations handling personal information, ensuring that different types of entities and data are appropriately addressed in the state's privacy regulations.

Business and Industry

https://www.njleg.state.nj.us/bill-search/2024/S4259