N.J.S.A. 56:8-166.5 — Applicability; consumers, personal data, control, processing.

56:8-166.5 Applicability; consumers, personal data, control, processing. 2. Notwithstanding any State law, rule, regulation, or order to the contrary, the provisions of P.L.2023, c.266 (C.56:8-166.4 et seq.) shall only apply to controllers that conduct business in the State or produce products or services that are targeted to residents of the State, and that during a calendar year either: a. control or process the personal data of at least 100,000 consumers, excluding personal data processed solely for the purpose of completing a payment transaction; or b. control or process the personal data of at least 25,000 consumers and the controller derives revenue, or receives a discount on the price of any goods or services, from the sale of personal data. L.2023, c.266, s.2.

This is the verbatim text of N.J.S.A. 56:8-166.5, retrieved from the New Jersey Legislature's public statute corpus. Statutes are amended periodically — for the most current version, check the external source link above. Kyzer is not a law firm and this page is not legal advice.