NJ Amendment To Data Breach Notification Law, Moves To Governor

New Jersey General Assembly is taking steps to enhance the state’s data breach notification requirements.  In short, if signed, AB 3245, would require businesses to notify consumers of online account security breaches.

New Jersey’s data breach notification law requires businesses to notify consumers of a breach of their personal information. Currently, the law defines personal information as an individual’s first name or first initial and last name linked with any one or more of the following data elements:

• Social Security number;
• Driver’s license number or State identification card number;
• Account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account.

AB 3245 would add to the above list of data elements:

• User name, email address, or any other account holder identifying information, in combination with any password or security question and answer that would permit access to an online account. 

This amendment would keep New Jersey in line with other states that have similarly enhanced their data breach notification laws to address online breaches, including Alabama, Arizona, California, Florida, Illinois, Nebraska, Nevada, South Dakota and Wyoming.

Source: https://www.jdsupra.com/legalnews/nj-amendment-to-data-breach-26737/