Controller, not required, actions, certain, relating to personal data.

N.J. Stat. § 56:8-166.14
in effect
Sign in to generate a plain English summaryAsk Belisarius Agent
11. Nothing in P.L.2023, c.266 (C.56:8-166.4 et seq.) shall require a controller to: a. re-identify de-identified data; b. collect, retain, use, link, or combine personal data concerning a consumer that it would not otherwise collect, retain, use, link, or combine in the ordinary course of business. L.2023, c.266, s.11.
Source: Open US Law by Vaquill AI (CC BY 4.0)URL: https://www.njleg.state.nj.us/legislative-activity/statutesFetched: 10/17/2026

Starting a business in New Jersey? New Jersey LLC guide: costs and requirements