The Privacy Protection Act is designed to enhance the safeguarding of personal information collected by government entities and health care facilities in New Jersey. The bill prohibits these entities from requesting or collecting sensitive information, such as immigration status, social security numbers, and taxpayer identification numbers, unless it is necessary for administering public services or benefits. It also specifies that records related to these assessments will not be classified as governmental records under the Open Public Records Act, thereby limiting their disclosure. Furthermore, the act mandates that individuals must be notified when their information is disclosed under legal compulsion and outlines the conditions for sharing automated license plate recognition information.

In addition to the protections for government entities, the bill imposes similar restrictions on health care facilities, which are also prohibited from collecting sensitive personal information unless it is essential for providing safe health care services. Disclosure of such information requires the individual's written consent, which must detail the information being shared and its purpose. The bill emphasizes the importance of privacy and consent by requiring standardized consent forms to be made available in multiple languages. It also includes provisions to prevent the sale or sharing of automated license plate recognition information without consent and mandates that government entities review their confidentiality policies to ensure compliance. Violations of the act could result in civil liability or penalties for health care facilities, with enforcement overseen by the Department of Health.

Statutes affected:
Introduced: 39:2-3.4