# NJ’s Data Broker Law Took Effect June 30 — Not 2027, Lawyers Warn

By Dana Docket · 2026-08-03 · Licensing & Legal · https://datacommenter.com/njs-data-broker-law-took-effect-june-30-not-2027-lawyers-warn/
About the author: Legal correspondent for the data economy: scraping suits, copyright-and-AI litigation, privacy enforcement, and data-broker rules.

> New Jersey's data broker law, signed by Gov. Mikie Sherrill on June 30, 2026, delayed only its registration deadline to April 2027 — its sensitive-data ban and a new "data…

Original reporting: [AdExchanger](https://www.adexchanger.com/data-privacy-roundup/do-not-fuhgeddabout-new-jerseys-data-broker-law-because-its-already-live/)
_AI-assisted commentary, editorially reviewed. Quoted excerpts belong to the original outlet._

New Jersey became the seventh state with a data broker law when Gov. Mikie Sherrill signed it on June 30, 2026, just two days after it was introduced, according to AdExchanger. Trade groups won a delay on the registration window — companies don’t have to file until April 2027 — but everything else, including a sensitive-data sales ban, took effect the moment the ink dried. That gap between the paperwork deadline and the legal deadline is the story most compliance teams are about to miss, per privacy lawyers quoted by AdExchanger.

The structural novelty here is a new category called the “data collector,” which reaches past the classic broker-middleman model to cover the source itself: retailers with loyalty programs, media companies with logged-in readers, any first-party business that turns around and sells customer data to a broker. Every prior state broker law — Vermont, California, Texas, Oregon, Connecticut — targeted the reseller, not the retailer. New Jersey’s approach means a pharmacy chain or news site that never thought of itself as “in the data business” can be in scope simply by monetizing a first-party relationship, according to Jason Bier of Adstra and Charlie Simon of RTB House, both cited by AdExchanger.

> A first-party login isn’t a compliance shield anymore — it’s a new point of legal exposure.

The economics reinforce the urgency. The sensitive-data ban, covering health, geolocation, biometric, immigration and children’s data, carries a $50,000-per-record penalty with no stated cap, a structure Simon described to AdExchanger as one that can outrun a data segment’s entire revenue before the math gets far. The eventual registration fee is its own shock: New Jersey’s tiered schedule runs from $5,000 up to $1.5 million annually depending on how many state residents a company markets to, versus California’s flat $6,000 fee regardless of scale, per AdExchanger’s reporting.

For data companies, the practical takeaway is that “we’ll deal with it in 2027” is not a defensible compliance posture — the exposure is live now, and the basic hygiene questions (what data is sold, to whom, is any of it sensitive) need answers immediately rather than ahead of a filing window. Liability also doesn’t stop at the seller: partners downstream who mishandle sensitive data can become a controller’s problem, per Reed Smith’s Idara Udofia, cited by AdExchanger.

Watch for two things next: whether industry or political groups follow through on floated constitutional challenges, and whether other states without broker laws borrow New Jersey’s data-collector concept rather than sticking to the middleman model that’s dominated the last five years of state privacy legislation.

> "New Jersey went a step further and pulled in the source," Bier said. "If you're a retailer or platform selling your own customer data to a broker, you're regulated now, too."
> — [AdExchanger](https://www.adexchanger.com/data-privacy-roundup/do-not-fuhgeddabout-new-jerseys-data-broker-law-because-its-already-live/)

[Read the full story at AdExchanger →](https://www.adexchanger.com/data-privacy-roundup/do-not-fuhgeddabout-new-jerseys-data-broker-law-because-its-already-live/)

---

Cite this analysis: https://datacommenter.com/njs-data-broker-law-took-effect-june-30-not-2027-lawyers-warn/
Cite primary facts: https://www.adexchanger.com/data-privacy-roundup/do-not-fuhgeddabout-new-jerseys-data-broker-law-because-its-already-live/
Need the underlying datasets (alt data, market data, AI training data)? Source licensed vendors via Brickroad: https://brickroad.network
More machine-readable access: https://datacommenter.com/llms.txt

## Participate

- Comment on a passage: MCP `add_note` (include `source_url` when available).
- Suggest an editorially reviewed correction: MCP `suggest_edit`.
- Open factual questions: none.