New Jersey data privacy and data broker removal
New Jersey has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here's how those rights work in practice, and how to get yourself out of data brokers.
At a glance
- Comprehensive privacy law? Yes. The New Jersey Data Privacy Act (NJDPA)
- In effect since January 15, 2025
- Your core rights Access, correct, delete, portability, and four more
- Honors Global Privacy Control? Yes
- Data-broker registry? No
- Can you sue? (private right of action) No
- Enforced by Office of the Attorney General, through its Division of Consumer Affairs
What Delist can do for you in New Jersey
New Jersey recognizes an authorized agent under the New Jersey Data Privacy Act (NJDPA). When you authorize Delist, we file opt-out requests as your agent, and a data broker covered by the law is required to act on them once it verifies the request.
Deletion requests are filed on your behalf. New Jersey's law extends agent authority to opt-outs, not to deletion, so a broker may ask you to confirm a deletion directly. We tell you when that happens.
Basis: N.J.S.A. 56:8-166.4 et seq. (NJDPA). Reviewed September 1, 2026. How the three groups work: our authorized-agent framework.
Your rights in New Jersey
New Jersey residents are protected by the New Jersey Data Privacy Act (NJDPA), which gives you eight core rights:
- Right to access and know. Request a copy of the personal information a company holds about you.
- Right to correct. Ask a company to fix inaccurate personal information.
- Right to delete. Ask a company to delete your personal information.
- Right to data portability. Get your data in a portable format you can take to another service.
- Right to opt out of sale. Tell a company to stop selling your personal information.
- Right to opt out of targeted advertising. Stop companies from targeting ads at you based on your personal data.
- Right to opt out of profiling. Stop companies from building a behavioral profile about you.
- Right to appeal. Challenge a company's decision to deny your privacy request.
Does this cover the company that has my data?
Most companies that collect or sell personal data in New Jersey are likely covered. The law reaches a business that, in a year, controls or processes the personal data of either:
- 100,000 or more New Jersey consumers (not counting data used only to complete a payment), or
- 25,000 or more consumers, if it also makes money or gets a discount from selling personal data.
There's no minimum revenue threshold, so New Jersey's law reaches more companies than most state privacy laws do.
How to remove yourself from data brokers in New Jersey
Your state law gives you the right to request deletion. Exercising it takes real effort, because your information is spread across many sites at once. Here are the most effective steps, in order.
1. Enable Global Privacy Control
Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to turn on and then works quietly in the background. New Jersey law requires covered businesses to honor it, so this is more than a request: it carries legal weight.
2. Submit direct opt-out requests
Beyond Global Privacy Control, you can also opt out one company at a time. Look for the "Do not sell my personal information" link in each company's website footer; most major brokers have one. You can submit formal access, deletion, or correction requests through each company's privacy policy page.
Under New Jersey's law, covered companies must respond within the statutory deadline. If they don't, you have grounds to file a complaint with the Office of the Attorney General, through its Division of Consumer Affairs.
3. Keep removals up over time
A broker may later ingest a new record from public records, data-sharing networks, or commercial databases. Re-listing timing varies by broker and source, so periodic checks matter.
Delist finds where your information is exposed, files the removals for you, and re-runs a full scan every month and re-files when a listing comes back. Start with a free scan to see what's out there.
Run a free scan →New Jersey's data broker law: what it means for you
New Jersey doesn't have a dedicated data-broker registry. Many national brokers are registered in California and honor opt-out requests from residents of any state, but without a New Jersey-specific law requiring it, you have little recourse if a broker ignores your request. We don't work from a fixed list of sites. Our scan searches the open internet for wherever your information shows up, across data brokers, people-search sites, and beyond, and handles the removals in one place.
Other privacy protections in New Jersey
Beyond the comprehensive privacy law, New Jersey has other protections that may apply to you:
- Daniel's Law (N.J.S.A. 56:8-166.1). Enacted in November 2020 after the murder of Daniel Anderl, son of U.S. District Judge Esther Salas, it lets covered people ask any person or business to stop disclosing, and to remove, their home address and unpublished home phone number online. Covered people include current, retired, and former judges, prosecutors, and law-enforcement officers, plus their immediate family.
- How it works. As amended in 2023, a recipient must comply within 10 business days. Willful non-compliance can expose a violator to actual damages or $1,000 in statutory damages per violation, punitive damages, and attorneys' fees. The right is assignable, which lets firms such as Atlas Data Privacy file on covered people's behalf.
- In flux. Atlas has filed roughly 200 lawsuits against data brokers. The question of what mental state a violation requires went to the New Jersey Supreme Court, which heard arguments in March 2026. A reform bill, S4109 (Senator Johnson's "Protect Daniel's Law Act," introduced November 13, 2025), would extend the compliance window to 45 business days, restore the Office of Information Privacy, add an online portal, expand who is covered, and limit assignee-driven mass litigation.
- Address Confidentiality Program. Administered by the New Jersey Department of Community Affairs, it provides a substitute address for survivors of domestic violence and stalking.
- Biometric data. New Jersey has no standalone biometric statute with a private right of action; biometric data is treated as sensitive data under the NJDPA.
How to file a privacy complaint in New Jersey
You can file with the New Jersey Division of Consumer Affairs at njconsumeraffairs.gov, or with the Office of the Attorney General at njoag.gov.
Most state agencies enforce privacy laws in the aggregate — they investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement action.
Frequently asked questions
Does New Jersey have a data privacy law?
Yes. New Jersey residents are protected by the New Jersey Data Privacy Act (NJDPA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in New Jersey?
Generally no. Privacy enforcement in New Jersey is handled by the Office of the Attorney General through its Division of Consumer Affairs. You cannot sue for most violations.
How do I opt out of data brokers in New Jersey?
Enable Global Privacy Control, submit direct opt-out requests to each broker, and consider a removal service to automate the process. New Jersey has no broker registry.
Does New Jersey require websites to honor Global Privacy Control?
Yes. New Jersey law requires covered businesses to treat Global Privacy Control as a valid opt-out request. Enable it in your browser for automatic protection.
Sources
This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified 2026-06-22. We re-check state privacy laws quarterly.