On January 16, 2024, New Jersey (NJ) Governor Phil Murphy signed into law S332/A1971, making New Jersey the latest state with a comprehensive state privacy law. (This follows similar comprehensive state privacy laws in CA, CO, CT, DE, IN, IA, MT, OR, TN, TX, UT, and VA). The law becomes effective one year after its enactment, which will be January 15, 2025. Entities subject the law (“controllers”) will have six (6) months after the effective date to comply with a 30-day cure period for violation that lasts eighteen (18) months after the effective date.
Some high-level notes on New Jersey’s privacy law:
