by Fisher Phillips

New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you may need to adjust your compliance approach if you do business there. The June 2 release by the Office of Consumer Protection aims to stretch the boundaries of the New Jersey Data Privacy Act (NJDPA) – so much so, in fact, that you should not assume your existing compliance programs would fully satisfy these proposed requirements. They include detailed standards for obtaining consumer consent, specific content and timing requirements for loyalty program notices, expanded definitions of personal and sensitive data, and new restrictions on the use of data for AI model training. The public comment period for businesses that want to make their voice heard runs through August 1, 2025. What do you need to know about these proposed rules, and what can you do help shape policy before these take effect without substantive changes?