Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | New Jersey |
|---|---|
| Statute citation | N.J. Stat. Ann. §§ 56:8-161 to 56:8-166 (Identity Theft Prevention Act (Data Breach Notification Provisions)) (amended 2019) |
| Individual notice timing | Most expedient time possible and without unreasonable delay New Jersey requires businesses to notify |
| Attorney general notice | Yes New Jersey requires notification to the Division of State Police before disclosing to customers for all |
| Biometric data | No |
| Medical information | No |
| Government ID numbers | Not extracted |
| Paper records | No |
| Private right of action | Yes |
| Credit monitoring required | No |
| Breach definition (excerpt) | In New Jersey 'breach of security' means unauthorized access to electronic files, media or data containing personal information that compromises the security, confidentiality or integrity of personal information when access to the personal information has not been secured by encryption or by any other method or technology that renders the personal information unreadable or unusable. Good faith acquisition of personal information by an employee or agent of the business for a legitimate business p |