Garden State New Jersey Sees Data Broker Law Quickly Bloom | Sheppard

New Jersey passed Assembly Bill 5328 on 30 June 2026, establishing immediate data broker and data collector registration requirements with a public registry launching March 2027. The law prohibits all companies from selling or licensing sensitive personal data (health, financial, biometric, geolocation, immigration status, and children's data) with penalties of $50,000 per record. If you buy, sell, or handle customer data across state lines, New Jersey just banned the sale of sensitive data outright and made registration mandatory by March 2027—with $50,000-per-record penalties for breach. You need to audit your data flows now, because most customer data (health, financial, location, children's) just became unsellable in the largest US market after California.