Requires disclosure of breach of security of geolocation data.
Impact
If passed, the bill would amend P.L.2005, c.226, specifically Section 10, to include geolocation data within the parameters that dictate disclosures in the event of a data breach. Currently, businesses are required to inform customers of breaches involving conventional personal information, such as Social Security numbers and credit/debit card information. By adding geolocation data to this list, A166 would ensure that consumers are made aware when their location data is compromised, potentially enabling them to take necessary steps to mitigate risks associated with such breaches.
Summary
Bill A166, introduced in the New Jersey legislature, seeks to enhance consumer protection by requiring businesses and public entities to disclose any breaches involving geolocation data. The legislation aims to amend existing laws concerning the security and privacy of personal information, extending the definition of what constitutes personal information to include geolocation data. This change is significant as it recognizes the sensitivity and potential risks associated with geolocation information, which can reveal the whereabouts of individuals in real-time.
Contention
While supporters of the bill advocate for increased transparency and consumer rights regarding personal data, opponents may argue that the regulation could impose additional burdens on businesses. Concerns may arise regarding how broadly geolocation data is interpreted and whether this could lead to an excessive number of disclosure requirements even for minor breaches. The balance between optimal consumer protection and the operational feasibility for businesses will likely be a key point of discussion during the legislative process.
Requires certain notifications and free credit reports for customers following breach of security of personal information within business or public entity.