56:8-166.10 Consumer rights, personal data.
282 words·~1 min read·
/nj/title-56/chapter-8/56-8-166-10·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
7. a. A consumer shall have the right to:
(1)confirm whether a controller processes the consumer's personal data and accesses such personal data, provided that nothing in this paragraph shall require a controller to provide the data to the consumer in a manner that would reveal the controller's trade secrets;
(2)correct inaccuracies in the consumer's personal data, taking into account the nature of the information and the purposes of the processing of the information;
(3)delete personal data concerning the consumer;
(4)obtain a copy of the consumer's personal data held by the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another entity without hindrance, provided that nothing in this paragraph shall require a controller to provide the data to the consumer in a manner that would reveal the controller's trade secrets; and
(5)opt out of the processing of personal data for the purposes of
(a)targeted advertising;
(b)the sale of personal data; or
(c)profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
b. A controller that has lawfully obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to this subsection by:
(1)retaining a record of the deletion request and the minimum data necessary for the purpose of ensuring the consumer's personal data remains deleted from the controller's records and not using such retained information for any other purpose pursuant to the provisions of P.L.2023, c.266 (C.56:8-166.4 et seq.); or
(2)deleting such personal data.
L.2023, c.266, s.7.