Controller, not required, actions, certain, relating to personal data.
56:8-166.14 Controller, not required, actions, certain, relating to personal data.
11. Nothing in P.L.2023, c.266 (C.56:8-166.4 et seq.) shall require a controller to:
a. re-identify de-identified data;
b. collect, retain, use, link, or combine personal data concerning a consumer that it would not otherwise collect, retain, use, link, or combine in the ordinary course of business.
L.2023, c.266, s.11.
This is the verbatim text of N.J.S.A. 56:8-166.14, retrieved from the New Jersey Legislature's public statute corpus. Statutes are amended periodically — for the most current version, check the external source link above. KyzerLex is not a law firm and this page is not legal advice.