Speaker, New Jersey Institute of Continuing Legal Education, "Data Privacy and Security in NJ – What You Need to Know"

The recently enacted New Jersey Data Privacy Act (NJDPA), due to take effect in January 2025, is a landmark law that will require certain entities to notify consumers about personal data collection and impose obligations for data security and privacy.

This program will provide an overview of the NJDPA and discuss some of the most important and impactful provisions of the statute that may affect you and your clients. We will also discuss how the NJDPA extends to issues like governance, bias, contracting, artificial intelligence and more.

The NJDPA applies to individuals or entities that conduct business in New Jersey or produce products or services targeted to New Jersey consumers if they control or process personal data of at least 100,000 New Jersey consumers, or control or process personal data of 25,000 New Jersey consumers and derive revenue (or receive discounts) from the sale of personal data.

The new law provides New Jersey consumers with the following rights with respect to personal data collected or processed by entities subject to the NJDPA:

• Right to Know: To confirm whether a controller processes the consumer’s personal data.
• Right to Access / Portability: To obtain access to the consumer’s personal data and a copy of the data in a readily transmittable form.
• Right to Correction: To correct inaccuracies in the consumer’s personal data.
• Right to Deletion: To delete the consumer’s personal data.
• Right to Opt Out: To opt out of processing personal data for the purposes of targeted advertising, the sale of personal data or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.