New Jersey Senate Bill S3714

New Jersey 2022-2023 Regular Session

• Introduced: 3/13/23
• Refer: 3/13/23

Caption

"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.

Impact

The NJ DaTA introduces significant changes to state laws concerning data privacy and consumer protection. It establishes that consumers have the right to rectification, erasure, and restriction of their PII, aligning with growing trends in data regulation seen at both state and federal levels. This legislation emphasizes the need for businesses to maintain compliance with consumer requests, and failure to do so could result in penalties under the New Jersey Consumer Fraud Act. Moreover, the establishment of an Office of Data Protection and Responsible Use under this bill aims to oversee the implementation of these new requirements and act as a liaison between consumers and businesses.

Summary

Senate Bill S3714, known as the New Jersey Disclosure and Accountability Transparency Act (NJ DaTA), aims to enhance the rights of consumers regarding the processing and disclosure of personally identifiable information (PII). The bill lays down specific requirements for controllers—entities that collect and process PII—ensuring that they can only process such information under certain conditions, primarily that consumers must provide clear consent for their data processing. Additionally, the bill mandates that consumers are informed about the data collection and processing practices in an accessible manner, fostering transparency.

Contention

While the bill has widespread support for its focus on consumer rights and accountability, it also faces criticism and points of contention, primarily from businesses concerned about operational implications. Critics argue that the stringent requirements for consent and the potential for heavy penalties might hinder business practices, especially for smaller entities that may not have the infrastructure to comply with detailed provisions. Moreover, there is concern about balancing data security with innovation, as the bill restricts automated decision-making and profiling in certain instances, possibly stifling technological advances.