New Jersey P.L.2026, c.25, ban on selling or licensing sensitive data (N.J. P.L.2026, c.25, secs. 1 (C.56:8-166.12(a)(6)), 3a (C.56:8-166.22), 5 (C.56:8-166.23))
In New Jersey no controller may sell sensitive data (health, biometric, precise location, children's data and the like), whatever its size, and no data broker or data collector may sell or license it at all, consent or not. The penalty is $50,000 per record.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(6) not sell sensitive data, which shall apply to all individuals or legal entities regardless of the number of consumers whose data the individual or entity controls or processes; ... 3. a. In no case shall a data broker or data collector sell or license sensitive data to any other individual or entity. ... shall be liable to a civil penalty of $50,000 for each record sold, offered for sale, or licensed.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide