NJ Delays Privacy Law Comments Deadline By a Month
New Jersey’s Office of Consumer Protection delayed until Sept. 2 the deadline to submit comments on draft rules for implementing the New Jersey Data Privacy Act (NJDPA), according to the office’s website. The comments were previously due Aug. 1.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
After the office released the draft rules in early June (see 2506020034)), privacy attorneys warned business clients that the state’s proposal was highly detailed, contained unusual requirements and expanded the statute (see 2507180020 and 2506170037).
The NJDPA took effect earlier this year, on Jan. 15 (see 2501060066). New Jersey is one of only three states that required rulemakings in their comprehensive privacy laws. California and Colorado are the other two.
"The draft regulations contain many unique provisions that are sure to generate significant input," Keir Lamont, Future of Privacy Forum senior director, blogged Friday. "This includes narrowing the carveout for public data and the internal research exception, broadening the definition of biometric data, requiring efforts to immediately delete sensitive data following the revocation of consent, establishing requirements to ‘refresh’ consent, and expanding Universal Opt-Out Mechanisms to control certain profiling decisions."