Observed Signal · Aug 3, 2026 · Regulation · Source: AdExchanger · Impact: 4/5 · Sentiment: Negative
New Jersey Data Broker Law Now in Effect
New Jersey enacted a new data broker law that was introduced on June 28 and signed into law on June 30. While trade groups successfully pushed the public registration window to April 2027, most provisions took effect immediately — notably a ban on selling sensitive data and a new statutory category called the “data collector” that brings first-party sellers (e.g., retailers, media companies) into scope. The sensitive-data prohibition covers health information, precise geolocation, financial account details, biometric data, immigration status and data collected from children, and violations carry a $50,000-per-record penalty. The law also creates a tiered annual registration fee for companies marketing to New Jersey residents ranging from $5,000 to $1.5 million. Legal challenges are expected and enforcement is anticipated to be selective at first, but companies are advised to inventory what data they sell and to whom.
Broad-scope state regulation that immediately bans sale of sensitive data, expands scope to first-party sellers, imposes large per-record penalties and high tiered annual fees—this materially affects retailers, publishers and data brokers.
Track RTB House Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- The bill was introduced on June 28 and signed on June 30 (article text).
- New Jersey delayed the public registration filing until April 2027, but most other provisions took effect immediately.
- The law introduces a new statutory category, “data collector,” which pulls first-party sellers (retailers, platforms, media companies) into regulation.
- A sensitive-data ban is already effective and covers health, precise geolocation, financial account details, biometric data, immigration status, and children's data; violations carry a $50,000-per-record penalty.
- The law establishes a tiered annual registration fee ranging from $5,000 to $1.5 million depending on how many New Jersey residents a company markets to.
Connected Companies & Entities
1 Entity mapped“"This makes the Mactaggart-induced one-week passage of CCPA look downright tame," said Charlie Simon, VP of private advertising at RTB House...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Publishers Face New Jersey Data Broker Law Surprise
New Jersey's data broker law, unique in the U.S., targets 'data collectors'—companies that collect data directly from consumers and sell or license it, even to a single broker. Publishers, who typically have direct audience relationships, may inadvertently qualify. The law, effective immediately upon signing June 30, has no minimum thresholds, and 'sale' is broadly defined to include routine ad tech arrangements. Qualifying companies must register by April 2027, with annual fees ranging from $5,000 to $1.5 million based on the number of New Jersey consumers' data sold. The state plans to suspend enforcement pending legislative fixes, but the sensitive data ban remains in effect. Experts advise publishers to conduct thorough data inventories and reassess downstream data-sharing relationships to mitigate financial and reputational risks.
New Jersey Bans Dynamic Pricing
New Jersey Gov. Mikie Sherrill signed the Fair Price Protection Act on July 23, 2026, prohibiting businesses from using consumer data to set individualized prices. The law also imposes a one-year moratorium on the new adoption of electronic shelf labels (ESLs) while the newly created New Jersey Innovation Authority studies the technology's impacts. The legislation preserves retailers' ability to set prices for loyalty program members and offer discounts to broadly defined groups (e.g., teachers, veterans). The move drew mixed reactions: trade groups and tech coalitions urged changes or criticized the law, while labor unions praised it as consumer and worker protection. The law's text states it will take effect on the first day of the seventh month following enactment.
California Delete Act and DROP Raise Broker Risk
AdExchanger reports that new U.S. privacy rules and enforcement are placing a renewed regulatory spotlight on companies that collect and sell consumer data. California’s Delete Act takes effect August 1 and introduces DROP, a centralized Delete Request and Opt‑Out Platform that allows residents to send one deletion request to all registered data brokers. Registered brokers must check DROP at least every 45 days and comply with deletion requests within 90 days; failures can trigger fines of $200 per request per day. Connecticut’s SB 4 (effective October 1 if signed) creates a separate data‑broker registry and defines “brokered personal data,” potentially sweeping in firms that buy, organize and resell third‑party information. Industry counsel warn companies cannot rely on informal self‑assessments (“I don’t think I’m a data broker”) and should reassess practices to avoid significant enforcement risk from CalPrivacy and state regulators.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.