New Jersey’s new data broker law does not just regulate the middlemen who buy and sell consumer records. It also reaches into any marketing operation that collects data directly from its own customers and then licenses that data downstream, which is a category a lot of martech stacks fall into without anyone labeling it that way.
The statute, A5328, creates a second registered category alongside the data broker itself: a “data collector,” defined in the bill text as a business that knowingly collects a consumer’s personal data through a direct relationship and then sells or licenses that data to a data broker. A publisher selling first-party audience segments to a data co-op, or a retailer licensing purchase history to a loyalty network, can land in that bucket without thinking of itself as a data broker at all. Registration fees scale with how many New Jersey consumers’ data a company touches, from 5,000 dollars under 100,000 consumers to 1.5 million dollars above 4.5 million, with 2,500 dollars a day in penalties for missing the window. Selling sensitive data outright is banned for every covered entity at 50,000 dollars per record.
The registration deadline is April 1, 2027, which reads as distant until you count the steps between here and there: mapping every data-sharing arrangement in the stack and deciding which ones count as a sale or license under the statute’s own terms. Marketing teams that leave that mapping for Q1 2027 will do it under deadline pressure. The ones that start the inventory now will only have to do it once.
New Jersey followed a year in which European regulators fined Google 403 million euro over inferred location and activity data, and browser-level privacy signals are already reshaping how consent gets collected on the front end. This is the same pressure showing up on the data-supply side of the business instead of the consent-banner side, and it will not be the last state to define “data collector” broadly enough to catch marketers who never thought the data-broker rules were about them.