The Murphy Administration announced proposed rules aimed at protecting consumers from the unauthorized use and sale of their personal data by the operators – or “controllers” – that collect it during certain business transactions. The proposed rules, published in the New Jersey Register today, implement P.L. 2023, c.266 – also known as the New Jersey Data Privacy Act (“NJDPA”), which Governor Phil Murphy signed into law in January 2024, providing New Jerseyans with some of the strongest data privacy protections in the country. “As data breaches and cyber threats continue to grow in this age of digital consumerism, protecting the personal data of New Jersey residents from unauthorized access and use is more important than ever. The proposed rules advance consumer privacy protections by requiring internet websites, online providers, and other entities to fully disclose to consumers how their private data will be used, notify consumers of their data privacy rights, and provide them with information on how to exercise those rights.” – AG Platkin