Law note · New Jersey
New Jersey Data Privacy Act, Division of Consumer Affairs enforcement
A violation of NJDPA is an unlawful practice and violation of the Consumer Fraud Act, N.J. Stat. § 56:8-1 et seq., enforced exclusively by the Division of Consumer Affairs and the Attorney General. Until the 18th month after the effective date (around July 15, 2026, now past as of this brief's as_of_date), the Division was required to issue a notice of alleged noncompliance and a 30-day cure opportunity before bringing an action if a cure was deemed possible; that window has closed.
The Act expressly forecloses a private right of action under NJDPA itself or under any other law, including the Consumer Fraud Act's own separate private-action mechanism.
What it asks of an app
- Expect NJDPA violations to be enforced exclusively by the Division of Consumer Affairs and the Attorney General under the Consumer Fraud Act, never by a private plaintiff.
- Do not rely on a notice-and-cure opportunity before an enforcement action. New Jersey's cure window closed around July 15, 2026.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official New Jersey session law text, P.L. 2023, c. 266, New Jersey Legislature