New Jersey A3339 revises requirements for disclosure of a breach of security of computerized records containing personal information.

New Jersey A3339 amends the "Identity Theft Prevention Act" to revise the requirements for disclosure of a breach of security of computerized records containing personal information. The bill mandates that businesses and public entities report breaches to the Division of State Police for investigation and notify affected customers within five business days, unless law enforcement needs or data restoration efforts require a delay. In cases of breaches involving usernames or passwords, businesses may direct customers to take protective steps instead of full disclosure.

New Jersey A3339 revises requirements for disclosure of a breach of security of computerized records containing personal information.

New Jersey A3339 amends the "Identity Theft Prevention Act" to revise the requirements for disclosure of a breach of security of computerized records containing personal information. The bill mandates that businesses and public entities report breaches to the Division of State Police for investigation and notify affected customers within five business days, unless law enforcement needs or data restoration efforts require a delay. In cases of breaches involving usernames or passwords, businesses may direct customers to take protective steps instead of full disclosure.