New Jersey A-5328 is a state law establishing a registration regime for data brokers and "data collectors" and prohibiting sales of sensitive data. Governor Mikie Sherrill signed it on June 30, 2026, two days after the bill was introduced (Source: wilmerhale.com; iapp.org).
Key provisions
- Registration. Covered data brokers and data collectors must register with the state.
- Fees. Annual registration fees scale by data volume, reaching $1.5 million at the top of the schedule.
- Sensitive-data sales. The law prohibits sales of sensitive data.
Reactions
Privacy practitioners have scrutinized the law since enactment on two grounds: the compressed two-day timeline from introduction to signature, and the breadth of the definition of covered entities, which reaches beyond conventional data brokers to entities characterized as "data collectors" (Source: wilmerhale.com; iapp.org).
Relation to AI policy
Data-broker registration and sensitive-data-sale prohibitions bear on the supply of training and targeting data available to AI developers and deployers, a channel treated in AI and Privacy and Three Privacy Problems AI Creates. The fee schedule's volume scaling is a compliance-cost lever distinct from the consent-based model of comprehensive state privacy statutes.
Relationships
- related: AI and Privacy, Three Privacy Problems AI Creates — the data-supply channel the law regulates.
- related: New Jersey FAIR Act (rent-pricing algorithms) — the other 2026 New Jersey algorithmic-regulation statute signed by the same governor.
- related: State-Level AI Regulation — state activity in the absence of a federal privacy statute.
- related: California CCPA/CPRA Regulations — Automated Decision-Making Technology (ADMT) — comparable state data-protection regime.