Bill Text: NJ A5362 | 2026-2027 | Regular Session | Introduced

---

Bill Title: Prohibits sale of minor's personal data; requires controllers and processors to provide mechanism for requesting deletion of certain personal data.

Sponsorship: Partisan Bill (Democrat 1)

Status: (Introduced) 2026-09-10 - Introduced, Referred to Assembly Science, Innovation and Technology Committee [A5362 Detail]

Download: New_Jersey-2026-A5362-Introduced.html

---

ASSEMBLY, No. 5362

STATE OF NEW JERSEY

222nd LEGISLATURE

 

INTRODUCED SEPTEMBER 10, 2026

 

 

Sponsored by:

Assemblywoman  ANNETTE QUIJANO

District 20 (Union)

 

 

 

 

SYNOPSIS

     Prohibits sale of minor's personal data; requires controllers and processors to provide mechanism for requesting deletion of certain personal data.

 

CURRENT VERSION OF TEXT

     As introduced.

  

An Act concerning minors' data privacy and supplementing Title 56 of the Revised Statutes.

 

     Be It Enacted by the Senate and General Assembly of the State of New Jersey:

 

     1.    a.  As used in this section: 

     "Consumer" has the same meaning as defined in section 1 of P.L.2023, c.266 (C.56:8-166.4).

     "Controller" has the same meaning as defined in section 1 of P.L.2023, c.266 (C.56:8-166.4).

     "Covered minor" means a consumer that a controller or processor knows to be a minor.

     "Knows to be a minor" means having actual knowledge that a consumer is a minor.

     "Minor" means an individual who is under 18 years of age.

     "Personal data" has the same meaning as defined in section 1 of P.L.2023, c.266 (C.56:8-166.4).

     "Processor" has the same meaning as defined in section 1 of P.L.2023, c.266 (C.56:8-166.4).

     b.    Notwithstanding the provisions of P.L.2023, c.266 (C.56:8-166.4 et seq.), a controller or processor shall not sell the personal data of a covered minor.

     c.     A controller or processor shall provide a mechanism for a covered minor or the parent of a covered minor to request the controller or processor to delete personal data concerning the covered minor.

 

     2.    This act shall take effect on the first day of the sixth month next following the date of enactment.

 

 

STATEMENT

 

     This bill prohibits controllers and processors from selling the personal data of a consumer known by the controller or processor to be a minor.  The bill also requires controllers and processors to provide a mechanism for covered minors or their parents to request the deletion of personal data concerning the covered minor.