New Jersey Data Privacy Act

Controller duties – New Jersey Data Privacy Act

New Jersey Data Privacy Act 56:8-166.12(a)(5): No processing in violation of anti-discrimination laws

A controller must not process personal data in violation of State or federal laws prohibiting unlawful discrimination against consumers.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Controller duties – New Jersey Data Privacy Act

56:8-166.12(a)(1) Data minimisation: collect only what is adequate, relevant and reasonably necessary
56:8-166.12(a)(10) Data protection assessment before heightened-risk processing
56:8-166.12(a)(2) Purpose limitation: consent for incompatible secondary uses
56:8-166.12(a)(3) Reasonable administrative, technical and physical data security
56:8-166.12(a)(4) Consent before processing sensitive data; COPPA for known children
56:8-166.12(a)(6) No sale of sensitive data, whatever the controller's size (added 30 June 2026)
56:8-166.12(a)(7) Consent revocation as easy as giving it; stop within 15 days
56:8-166.12(a)(8) Consent for targeted advertising, sale or significant profiling of teens aged 13 to 16

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Jersey Data Privacy Act controls