New Jersey 2022-2023 Regular Session

New Jersey Assembly Bill A1703

Introduced
1/11/22  

Caption

Requires certain persons and business entities to maintain comprehensive information security program.

Impact

If enacted, A1703 would significantly update the legal requirements for data protection within the state of New Jersey, particularly targeting entities that process sensitive personal information, such as social security numbers, driver's licenses, and financial account identifiers. By mandating detailed security measures, including risk assessment and employee training, the bill would lead to enhanced protections against security breaches that could result in identity theft or fraud. Businesses would be held accountable for the security of customer information, aligning state law with growing national expectations for privacy and data security.

Summary

Assembly Bill A1703, introduced in New Jersey, requires that any individual or business entity handling personal information about residents must establish and maintain a comprehensive information security program. This program needs to encompass administrative, technical, and physical safeguards to protect personal information, which includes identifying risks to security and ensuring compliance with these data protection protocols. The bill aims to bolster data security measures amid increasing concerns over privacy and information breaches.

Contention

There may be points of contention around the implementation of this bill, particularly in terms of compliance costs and the potential administrative burden it places on small businesses. While proponents argue that enhanced security measures are necessary to protect consumer information, critics may raise concerns about the practicality of enforcing such comprehensive security protocols, especially for smaller entities with fewer resources. Additionally, the bill includes penalties for non-compliance, which may provoke discussions regarding the balance between consumer protection and business viability.

Companion Bills

NJ S3412

Same As Requires certain persons and business entities to maintain comprehensive information security program.

Previously Filed As

NJ A4093

Requires certain persons and business entities to maintain comprehensive information security program.

NJ A1852

Requires certain notifications and free credit reports for customers following breach of security of personal information within business or public entity.

NJ S2956

Exempts certain personal information and entities from certain requirments concerning notification and disclosure of personal data.

NJ A1401

Exempts certain personal information and entities from certain requirements concerning notification and disclosure of personal data.

NJ A3882

Requires public schools to post link to subsidized school meals application, and certain informational videos related to application, in prominent place on Internet website.

NJ A3339

Revises requirements for disclosure of a breach of security of certain computerized records containing personal information.

NJ A1324

Requires social media companies to take certain actions concerning accounts maintained by or featuring minors.

NJ A1978

Requires Chief Diversity Officer in Department of Treasury to develop and implement programs to increase utilization of minority-owned and women-owned businesses in State.

NJ A3716

Requires rental car company to provide notice to renter to delete personal information from motor vehicle computer system upon return of vehicle.

NJ A2494

"New Jersey Works Act"; concerns businesses and pre-employment training programs; provides tax credit to businesses supporting pre-employment training programs; appropriates $1 million.

Similar Bills

No similar bills found.