Data Broker Laws
New Jersey Data Broker Registration Law: Requirements and Deadlines
What New Jersey’s data broker law requires, maintained by Stauss PLLC. Last reviewed July 2026.
What You Need to Know
New Jersey's data broker law creates requirements not only for data brokers, but also for data collectors, which are entities that have a direct relationship with individuals but sell their personal data to data brokers. The law also creates a tiered – and costly – structure for annual registration fees, requiring the largest data brokers and data collectors to pay a $1.5 million annual registration fee. Data brokers and data collectors also face significant fines for failing to register or update their registration information. Further, the law prohibits the sale of sensitive data both through the data broker provisions and by amending New Jersey’s consumer data privacy law. Violations of that prohibition carry a severe $50,000-per-record fine.
Official law text
How New Jersey defines and regulates data brokers
| Who counts as a data broker | A person or legal entity, including, but not limited to, a controller, that knowingly collects or purchases the personal data of a consumer with whom the person or legal entity does not have a direct relationship and sells or licenses that data to a third party.noteThe law states that examples of a direct relationship include if the consumer is a past or present: (1) customer, client, subscriber, or user of the person or legal entity’s goods or services; (2) employee, contractor, or agent of the person or legal entity; (3) investor in the person or legal entity; or (4) donor to the person or legal entity. |
| Which businesses it applies to | – |
| Information covered | “Personal data” means any information that is linked or reasonably linkable to an identified or identifiable person. “Personal data” shall not include de-identified data or publicly available information. |
| Other provisions | The law also extends to “data collectors” which are businesses, or units of a business, separately or together, that knowingly: (1) collect the personal data of a consumer with whom the data collector has a direct relationship; and (2) sell or license such personal data to a data broker The law prohibits data brokers and data collectors from selling or licensing sensitive data |
| Penalties | $2,500 per day for failing to register or pay registration fee + registration fee $2,500 per day for failing to submit or update disclosure information $50,000 for each record sold, offered for sale, or licensed in violation of prohibition on selling or licensing sensitive data |
Compliance requirements5
| Requirement | Applies? |
|---|---|
| Annual Registration Requirement | Yes |
| Registration Disclosure Obligations | Yes |
| Privacy Policy Disclosure Obligations | No |
| Creates Substantive Consumer Rights | No |
| Delete Request & Opt-out Platform (DROP) | No |
Questions about New Jersey’s data broker law?
Stauss PLLC advises companies on state privacy, AI, and data broker compliance.
Contact Stauss PLLCThis page is provided for general informational purposes only, is not legal advice, and does not create an attorney-client relationship. State laws change frequently; coverage reflects this tool’s most recent update. Contact Stauss PLLC to confirm how these requirements apply to your organization.