Last week, we wrote about the newly enacted New Jersey data broker law. On July 10, 2026, the New Jersey Attorney General’s Division of Consumer Affairs published an alert clarifying that covered data brokers and data collectors will not need to register or pay registration fees until the Division launches the required public registry, which is expected in spring 2027. The first registration period is anticipated to run from April 1, 2027, through June 30, 2027, with additional guidance to come before then. The alert also notes that the Division plans to issue further guidance on other aspects of the law, including its restrictions on the sale or licensing of sensitive data.

Although some enforcement activity may be delayed while the registry and guidance are developed, businesses that collect, sell, license, or otherwise handle New Jersey consumer data should consider using this period to assess whether the law applies and what compliance steps may be needed.

Photo of Roma Patel Roma Patel

Roma Patel focuses her practice on a broad range of data privacy and cybersecurity matters. She handles comprehensive responses to cybersecurity incidents, including business email compromises, network intrusions, inadvertent disclosures and ransomware attacks. In response to privacy and cybersecurity incidents, Roma guides clients…

Roma Patel focuses her practice on a broad range of data privacy and cybersecurity matters. She handles comprehensive responses to cybersecurity incidents, including business email compromises, network intrusions, inadvertent disclosures and ransomware attacks. In response to privacy and cybersecurity incidents, Roma guides clients through initial response, forensic investigation, and regulatory obligations in a manner that balances legal risks and business or organizational needs. Read her full rc.com bio here.