Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
Regulamentações › Estados dos EUA › Nova Jersey
NJDPA
New Jersey Data Privacy Act
QuandoEm vigor desde 15 de janeiro de 2025
Quem fiscalizaProcurador-Geral de Nova Jersey (Divisão de Assuntos do Consumidor)
A quem se aplicaEmpresas que tratam dados pessoais de residentes do estado acima dos limites da lei. Os limites, as isenções e as regras sobre dados sensíveis variam por estado.
Limites de aplicabilidade100,000 consumidores, ou 25,000 consumidores e qualquer receita ou desconto proveniente da venda de dados pessoais
Opt-out universalDeve respeitar mecanismos universais de opt-out selecionados pelo usuário, como o GPC, a partir de 15 de julho de 2025
Período de saneamentoAviso de correção de 30 dias obrigatório até 1º de julho de 2026 (18 meses após a entrada em vigor)
Prazo para solicitações45 dias, prorrogáveis uma vez por 45 dias mediante aviso
Penalidade máximaAté $10,000 na primeira violação e $20,000 nas violações seguintes, nos termos da Consumer Fraud…
Ação privadaSem direito privado de ação
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
A quem se aplica
Limites de aplicabilidade
1
100,000 consumers, or 25,000 consumers plus any revenue or discount from selling personal data; payment-only data excluded.P.L.2023, c.266, § 2 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified. No revenue-share minimum, so lower than standard 25k test.
Isenções
2
GLBA financial institutions and insurers exempt; HIPAA PHI exempt only at data level; nonprofits are covered.P.L.2023, c.266, § 10 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Dados sensíveis e menores
Dados sensíveis
2
Opt-in consent; categories include financial account data, transgender or non-binary status, sex life and health.P.L.2023, c.266, §§ 1, 9 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Crianças e adolescentes
2
Ages 13 to 16 (under 17): consent required for targeted ads, sale or profiling; under 13 follows COPPA as sensitive data.P.L.2023, c.266, § 9 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Minimização de dados
1
Collection adequate, relevant and reasonably necessary for disclosed purposes.P.L.2023, c.266, § 9 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Direitos dos consumidores
Direitos
2
Access, correct, delete, portability, opt out of targeted ads, sale and significant profiling (7 rights).P.L.2023, c.266, § 7 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Prazo para solicitações
2
45 days, extendable once by 45 days with notice.P.L.2023, c.266, § 4 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Recursos
3
Internal appeal decided within 45 days; denial must tell consumer how to contact the Division of Consumer Affairs.P.L.2023, c.266, § 4 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Opt-out universal
2
Must honor user-selected universal opt-out mechanisms such as GPC from July 15, 2025.P.L.2023, c.266, § 8 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Deveres das empresas
Avaliações
2
Assessment before heightened-risk processing (targeted ads, risky profiling, sale, sensitive data); provided to the Division on request.P.L.2023, c.266, § 9 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Contratos com operadores
2
Contract terms, confidentiality, deletion, compliance information, assessments or annual independent audit, and written subcontractor flow-down.P.L.2023, c.266, § 13 · source ↗
No subcontractor notice or objection right. Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Aviso de privacidade
1
Notice of categories, purposes, third-party categories, rights and appeal, contact; clear sale, targeted ads and profiling disclosure with opt-out.P.L.2023, c.266, § 3 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Programas de fidelidade
2
Loyalty and discount programs allowed only if the controller clearly discloses that they involve sale or processing the consumer can opt out of.P.L.2023, c.266, §§ 4-5 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Dados desidentificados
2
Deidentified data requires reasonable measures, a public commitment, and contract limits on recipients. No pseudonymous data rules.P.L.2023, c.266, §§ 1, 11 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Fiscalização
Quem fiscaliza
2
Attorney General enforces under the Consumer Fraud Act; Division of Consumer Affairs must issue rules.P.L.2023, c.266, §§ 14-16 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Período de saneamento
1
30-day cure notice required until July 1, 2026 (18 months after effect); now expired.P.L.2023, c.266, § 14 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Penalidade máxima
3
Up to $10,000 for a first violation and $20,000 for later violations under the Consumer Fraud Act.P.L.2023, c.266, § 14; N.J.S.A. 56:8-13 · source ↗
Amounts from AG/Division FAQ; N.J.S.A. 56:8-13 cite not read directly.
Ação privada
0
No private right of action.P.L.2023, c.266, § 16 · source ↗
Cited by P.L.2023, c.266 bill section (S332 sixth reprint); codified at N.J.S.A. 56:8-166.4 et seq., exact section mapping not verified.
Regulamentação
2
Division must adopt rules; June 2, 2025 proposal lapsed June 2, 2026 without adoption, so no rules in force.P.L.2023, c.266, § 15 · secondary source · source ↗
Re-proposal timing unknown as of October 2026.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais