Most owners assume comprehensive privacy law is a Big Tech concern. It is not. The New Jersey Data Privacy Act applies at 100,000 consumers, or just 25,000 if you derive any revenue from selling personal data, and there is no small business exemption. The 30-day cure period closed on July 1, 2026, and June 2026 amendments added data broker registration plus a sensitive data sale ban that applies to every business regardless of size.
