Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
NJDPA
New Jersey Data Privacy Act
Lei no estilo da Virgínia, com definições amplas de dados sensíveis e regulamentação pela Divisão de Assuntos do Consumidor.
The law in brief
The New Jersey Data Privacy Act (NJDPA) is New Jersey's comprehensive consumer privacy law. It has been in effect since 15 January 2025. Like the other state laws built on the same model, it gives New Jersey residents rights over their personal data and puts duties on the businesses that decide how that data is used (controllers) and on the vendors that handle it for them (processors).
Lei no estilo da Virgínia, com definições amplas de dados sensíveis e regulamentação pela Divisão de Assuntos do Consumidor.
New Jersey's law applies to nonprofit organizations as well as businesses and treats financial account data as sensitive.
A quem se aplica
- Empresas que tratam dados pessoais de residentes do estado acima dos limites da lei. Os limites, as isenções e as regras sobre dados sensíveis variam por estado.
- The thresholds usually turn on how many New Jersey residents' personal data a business handles in a year, and whether it earns revenue from selling personal data. Check the statute for the exact figures.
- Like most state privacy laws, it exempts some organizations and data, commonly including data already covered by HIPAA or the Gramm-Leach-Bliley Act, and data about people acting in an employment or commercial capacity.
What it requires
A clear privacy notice
Publish a privacy notice describing the categories of personal data you process, why, what you share and with whom, how consumers can use their rights, and how to appeal.
Collect only what you need
Limit collection to what is adequate, relevant and reasonably necessary for the purposes you disclosed, and secure it with reasonable safeguards.
Dados sensíveis
Get the consumer's opt-in consent before processing sensitive data, such as health information, biometric or genetic data, precise geolocation, and data about a known child (for whom parental consent is needed).
Contracts with processors
Bind each processor by contract to your instructions, confidentiality, deletion or return at the end of the service, and help with audits and assessments.
Honor opt-outs
Stop targeted advertising, sales and, where covered, qualifying profiling for consumers who opt out, and check whether the law requires you to honor universal opt-out signals such as Global Privacy Control.
Data protection assessments
Document an assessment before processing that presents a heightened risk, such as targeted advertising, selling personal data, processing sensitive data, and certain profiling.
Direitos das pessoas
New Jersey residents can generally ask a business to confirm and access their personal data, correct it, delete it and get a copy in a portable format, and can opt out of targeted advertising, the sale of their data, and profiling that produces legal or similarly significant effects. Businesses generally have 45 days to respond, extendable once. Residents can usually appeal a refusal.
Enforcement and penalties
Aplicada pelo Procurador-Geral de Nova Jersey (Divisão de Assuntos do Consumidor). As violações estão sujeitas a penalidades civis definidas pela lei.
What to do first
- Check the thresholds against your New Jersey consumer numbers and any data sales.
- Map the personal and sensitive data you hold about New Jersey residents.
- Update your privacy notice and add the opt-out routes the law requires.
- Set up requests and appeals within the response deadlines.
- Put NJDPA-ready terms in processor contracts.
- Build one program for all state laws, then add New Jersey's departures.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
Novidades recentes
Nada informado ainda. O Regulatory Watch lista novas regras, ações de fiscalização e decisões judiciais à medida que surgem.
Fontes
- Todas as leis abrangentes de privacidade que entram em vigor em 2026 MultiState · Escritório de advocacia ou analista
- Comparação das leis estaduais de privacidade dos EUA (24 leis promulgadas, datas de vigência) Recording Law · Escritório de advocacia ou analista
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais