Ad Tech Privacy Watch

State Privacy Law Wave: NJ, VT, and More

State Privacy Law Wave: NJ, VT, and More

Key Questions

What are the key provisions of New Jersey's new privacy law?

New Jersey A5328 features a broad 'data collector' definition, tiered fees up to $1.5M, a ban on selling sensitive data, and $50k per record penalties, with enforcement beginning in spring 2027.

What does Vermont's new privacy act require?

Vermont's Data Privacy and Online Surveillance Act sets a 35k consumer threshold, defines broad sensitive data categories, and mandates data protection assessments for covered entities.

How many Americans are now covered by state privacy laws?

More than half the US population is covered following enactments in New Jersey and Vermont plus updates in Connecticut, Arkansas, and Utah effective July 1, 2026.

New Jersey A5328 enacted with broad 'data collector' definition, tiered fees up to $1.5M, ban on selling sensitive data, $50k/record penalty, enforcement spring 2027. Vermont Data Privacy and Online Surveillance Act with 35k consumer threshold, broad sensitive data, and data protection assessments. CT, AR, UT updates effective July 1. More than half US population now covered by state privacy laws.

Sources (2)
Updated Jul 27, 2026