New Jersey has enacted a comprehensive data broker law that includes media and streaming platforms that sell customer data under its definition of 'data collectors.' While registration requirements begin in 2027, the law's ban on the sale of sensitive data is already in effect, carrying significant potential penalties for non-compliant companies.
The immediate enforcement of the sensitive data ban forces streaming platforms and media companies to audit their monetization pipelines now, rather than waiting for the 2027 registration deadline. By including 'data collectors' — entities with direct consumer relationships — New Jersey eliminates the first-party loophole that often exempts publishers from middleman-focused data broker laws. This move signals a shift toward stricter state-level oversight of the entire data supply chain. Industry participants should monitor the 2027 registration rollout, as the $1.5 million fee cap significantly exceeds the $6,000 flat fee currently used by California, potentially altering the economics of regional data sales.
The New Jersey legislation follows a wave of aggressive state-level data broker regulations aimed at increasing transparency and consumer control. In June 2026, Vermont Governor Phil Scott signed House Bill H. 211, which significantly updated its existing registry law. Per Hunton Andrews Kurth (June 2026), the Vermont updates expanded the definition of 'brokered personal information' and introduced a requirement for brokers to verify the identity and intended use of data by downstream purchasers. This 'know-your-customer' approach for data transactions mirrors emerging national trends where the burden of proof for legitimate data use is shifting toward the seller.
Simultaneously, California's landmark Delete Act (SB 362) reached a critical milestone in August 2026. According to the California Privacy Protection Agency (August 2026), data brokers in that state must now begin processing deletion requests through the centralized Data Broker Requests and Opt-out Platform (DROP) every 45 days. Unlike New Jersey's current focus on registration and sales bans, California’s mechanism allows residents to request their data be purged from all registered brokers via a single portal. The convergence of New Jersey’s high penalties and California’s centralized deletion highlights a tightening regulatory environment for B2B data monetization.
These individual state actions occur in the absence of a preemptive federal privacy standard, leading to what industry experts describe as a fragmented compliance landscape. Per Fox Rothschild (June 2026), New Jersey's decision to include 'data collectors' specifically addresses the hybrid nature of modern digital businesses that operate as both first-party publishers and third-party data sellers. With New Jersey now the seventh state to implement such a registry, technical teams are increasingly forced to build region-specific data governance frameworks to avoid escalating per-record fines.
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source