New Jersey passed a bill amending breach of security disclosure requirements. Under the bill, New Jersey’s breach of security disclosure requirements now apply in the event of unauthorized access to e-mail addresses and user names (accessed in combination with passwords or security questions and answers). The bill also provides an alternate method of notifying individuals in the event the breach of security involves information that permits access to the individual’s e-mail account only (and where no other personal information is obtained). The bill becomes effective September 1, 2019.
See New Jersey Legislature website for the full text of the Statutes:https://www.njleg.state.nj.us/2018/Bills/S0500/52_R1.PDF
