New Jersey just passed the priciest data broker law in the country. Enforcement is already delayed.

What the law actually covers

Governor Mikie Sherrill signed New Jersey's data broker law on June 30, 2026, just two days after it was introduced in the legislature. It applies broadly, not just to dedicated data brokers but to any business that directly collects and sells consumer data, a wider net than most comparable state laws. It also bans the outright sale of sensitive personal information. (Bloomberg Law)

The number that got attention

Annual registration fees for covered data sellers range from $5,000 up to $1.5 million, depending on the company. For comparison, California's fee, previously the highest in the country, tops out at $6,000 a year. New Jersey's ceiling is 250 times that. On paper, this is the most expensive data broker law any state has passed. (Bloomberg Law)

Then the delay

Two weeks after signing, New Jersey's Attorney General announced that businesses do not need to comply with the registry or fee requirements until June 2027, with more guidance to come on provisions the state itself admits are still ambiguous. A law that looked like it would bite immediately now has almost a year of runway before it does anything at all. (Bloomberg Law)

The pattern I keep writing about

This is the same shape as the EU's AI Act delay I wrote about last week, a genuinely strong law on paper, followed almost immediately by a real-world delay in actually enforcing it. It is not evidence that the law is fake or that data brokers won. It is evidence that writing a strong rule and actually operationalizing it are two different jobs, and the second one always takes longer than the headline suggests. If you are in New Jersey and were expecting your data to stop being sold this summer, the honest answer is not yet, and probably not until sometime after June 2027.

The upshot is the same one I keep coming back to. Laws like this are a real, worthwhile backstop, and they are still slow, negotiable things that regulators can push back whenever enforcement gets complicated. What actually protects your data today is what you choose to hand over in the first place, not a fee schedule that has not started collecting yet.

For more on how this pattern plays out elsewhere, see the EU's AI Act delay. You can see what this studio builds at jcmobileappstudio.com.