New Jersey’s Data Breach Notification Amendment Signed into Law

On May 10, an amendment enhancing New Jersey’s data breach notification law by expanding the definition of personal information, and updating notification requirements.

New Jersey’s data breach notification law requires businesses to notify consumers of a breach of their personal information. Previously the law defined personal information as an individual’s first name or first initial and last name linked with any one or more of the following data elements:

• Social Security number;
• Driver’s license number or State identification card number;
• Account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account.

The new law adds to the above list of data elements:

• User name, email address, or any other account holder identifying information, in combination with any password or security question and answer that would permit access to an online account.

Source: https://www.jdsupra.com/legalnews/new-jersey-s-data-breach-notification-13113/