New Jersey · Assembly Bill · 220th Legislature
AB5599
New Jersey Assembly Bill No. 5599 — An Act concerning biometric surveillance systems and supplementing P.L.1960, c.39 (C.56:8-1 et seq.)

Status ● Failed Effective N/A Passage Likelihood N/A

WHAT THIS BILL REGULATES · 3 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority
Enforcement by the Division of Consumer Affairs and the Attorney General under the New Jersey Consumer Fraud Act (P.L.1960, c.39, C.56:8-1 et seq.). The Attorney General may issue cease and desist orders. Private right of action available under the Consumer Fraud Act for injured parties. A 30-day cure period applies to first violations — upon demonstrating compliance, any penalty for a first violation is waived.
Private Right of Action
Private right of action available under the Consumer Fraud Act for injured parties.
Penalties
Violations are unlawful practices under the Consumer Fraud Act. First offense: monetary penalty up to $10,000. Subsequent offenses: up to $20,000. The Attorney General may issue cease and desist orders. Injured parties may recover treble damages and costs. Punitive damages available. Attorney's fees recoverable under the Consumer Fraud Act. First-violation penalty waived if business demonstrates compliance within 30 days.

What This Bill Requires

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text
Analysis & Obligations
Section 1
Definitions

As used in this section: "Biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1" means any computer software that performs facial recognitionFacial recognition"Facial recognition" means an automated or semi-automated process that assists in identifying a person or capturing information about a person based on the physical characteristics of the person's face, or that logs characteristics of a person's face, head, or body to infer emotion, associations, activities, or location of the person.Section 1 or other remote biometric recognition. "Business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction. "Facial recognitionFacial recognition"Facial recognition" means an automated or semi-automated process that assists in identifying a person or capturing information about a person based on the physical characteristics of the person's face, or that logs characteristics of a person's face, head, or body to infer emotion, associations, activities, or location of the person.Section 1" means an automated or semi-automated process that assists in identifying a person or capturing information about a person based on the physical characteristics of the person's face, or that logs characteristics of a person's face, head, or body to infer emotion, associations, activities, or location of the person.

Section 1 establishes the three defined terms used throughout the bill: biometric surveillance system, business entity, and facial recognition. The facial recognition definition is notably broad — it includes not only identification processes but also systems that log facial, head, or body characteristics to infer emotion, associations, activities, or location. This expansive definition could sweep in analytics tools well beyond traditional facial recognition, including emotion detection and behavioral analytics systems.

Section 2
Restrictions on use of biometric surveillance systems
Deployer

(a)–(b) 1 a. It shall be an unlawful practice and a violation of P.L.1960, c.39 (C.56:8-1 et seq.) for a business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 to use any biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 on a consumer at the physical premises of the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1, except as provided in subsection c. of this section. b. A business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 may use a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 on a consumer at the physical premises of the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1, if: (1) the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 provides clear and conspicuous notice to the consumer regarding its use of a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1; and (2) the biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 is used for a lawful purpose. The business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 may satisfy the notice requirement of paragraph (1) of this section by posting a sign in a conspicuous location at the perimeter of any area where a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 is being used.

(c) 2 If a business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 uses information obtained through a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 to deny a consumer access to its premises or to remove a consumer from its premises, the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 shall provide the consumer with a detailed explanation regarding its actions and the criteria used by the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 in making its determination.

(d) Upon being informed of a first violation, a business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 shall comply with the provisions of this act within 30 days. Upon demonstrating compliance, any penalty provided pursuant to P.L.1960, c.39 (C.56:8-1 et seq.) shall be waived.

(e) In accordance with the Administrative Procedure Act, P.L.1968, c.410 (C.52:14B-1 et seq.), the Director of the Division of Consumer Affairs may promulgate rules and regulations to effectuate the provisions of this section.

Section 2 is the bill's operative core, establishing a general prohibition on the use of biometric surveillance systems on consumers at business premises, subject to two conditions that together serve as the sole permissible use pathway: the business must provide clear and conspicuous notice, and the system must be used for a lawful purpose. A sign posted at the perimeter of the surveilled area satisfies the notice requirement.

Subsection (c) imposes an additional obligation when biometric surveillance data is used to deny a consumer access to or remove them from the premises — the business must provide a detailed explanation of its actions and the criteria underlying its determination. Subsection (d) creates a 30-day cure period for first violations. Subsection (e) grants the Director of the Division of Consumer Affairs rulemaking authority.

Compliance actions 2 items
1
Business entities must provide clear and conspicuous notice to consumers before using a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 on them at the business's physical premises, and must use the system only for a lawful purpose. Notice may be satisfied by posting a sign at the perimeter of the surveilled area.
T-01.1
2
Business entities that use biometric surveillance data to deny a consumer access to premises or remove a consumer from premises must provide the consumer with a detailed explanation of the actions taken and the criteria used in making the determination.
H-01.1
Section 3
Prohibition on sale or sharing of biometric surveillance data
Deployer

(a) 3 A business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1 shall not sell, lease, trade, share, or otherwise profit from information obtained through the business entityBusiness entity"Business entity" means any natural or legal person, business corporation, professional services corporation, limited liability company, partnership, limited partnership, business trust, association, or any other legal commercial entity organized under the laws of this State or any other state or foreign jurisdiction.Section 1's use of a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 on a consumer.

(b) A violation of this section shall be an unlawful practice and a violation of P.L.1960, c.39 (C.56:8-1 et seq.).

Section 3 establishes a categorical prohibition on monetizing or sharing biometric surveillance data obtained from consumers. The prohibition is broad — it covers selling, leasing, trading, sharing, or otherwise profiting from such data. Unlike Section 2's conditional use permission, Section 3 contains no exceptions: even where a business lawfully uses a biometric surveillance system under Section 2, the data obtained may never be commercially exploited or shared with third parties. Violations are designated as unlawful practices under the Consumer Fraud Act.

Compliance actions 1 item
3
Business entities must not sell, lease, trade, share, or otherwise profit from information obtained through the use of a biometric surveillance systemBiometric surveillance system"Biometric surveillance system" means any computer software that performs facial recognition or other remote biometric recognition.Section 1 on a consumer.
D-01.4
Section 4
Effective date

This act shall take effect on the first day of the sixth month following enactment.

Section 4 provides that the act takes effect on the first day of the sixth month following enactment. Because the bill was not enacted, this provision has no operative effect.

Passage Likelihood

Failed
Status Failed
Final action Introduced, Referred to Assembly Consumer Affairs Committee

Legislative History

2023-06-08 Introduced, Referred to Assembly Consumer Affairs Committee

Entry Last Reviewed

2026-05-16
AI generated