S332, New Jersey Data Protection Act
In forceN.J. Stat. Ann. section 56:8-166.4 et seq. (P.L. 2023, c. 266)
Requires a controller that has actual knowledge, or willfully disregards, that a consumer is at least 13 but younger than 17 years of age to obtain the consumer's own opt in consent before processing personal data for targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects, and treats personal data collected from a known child under 13 as sensitive data that must be processed in accordance with COPPA.
| Age threshold | 17 |
| Penalties | Enforced under the New Jersey Consumer Fraud Act by the Division of Consumer Affairs, with a cure period in place through mid 2026 |
| Enforcement body | New Jersey Division of Consumer Affairs |
| Private suits | no |
Source: Full text of law