Services / Privacy Compliance / New Jersey
Breach and consumer notification laws in New Jersey — what a business must do when personal information is lost or exposed.
Did you know? Every state sets its own rules for when a breach is reportable, who must be told and how. In New Jersey:
There are specific considerations when determining if a breach is reportable
If notification is not required, that decision must be documented in writing and kept for five years
Reporting to the Division of State Police in the Department of Law and Public Safety is mandatory, before any disclosure to affected individuals
Notifications may only be given by specific methods
Notifications may be required to the consumer reporting agencies
If your breach affects residents of other states, you must notify them under that state’s rules
If a vendor is breached, they must report it to the data owner, who is responsible for reporting and consumer notification
Violators face penalties in addition to any others authorized by law, plus civil suits entitling the plaintiff to treble damages and costs
New Jersey has additional laws on how personal data is protected and disposed of to prevent a breach
Federal laws, industry regulations and out-of-country laws may also apply
Please note
This summary of regulations is provided for information purposes only. No action based on this summary alone should be undertaken. Each individual or entity must obtain appropriate guidance for its specific circumstances.
© 2018 CSR. All rights reserved. CSR refers to the corporation CSR Professional Services, Inc.
Readiness Pro
CSR Readiness Pro and the Breach Reporting Service handle the reporting and notification rules for you.
Mon – Fri · 8:00am – 5:30pm
Privacy compliance
Get started
Secure, scheduled shredding is the simplest way to keep paper records out of a breach report. Save 10% on your initial shred.
Mon – Fri · 8:00am – 5:30pm
