Can I ignore my obligations as a service provider with access to personal information in New Jersey? What are the requirements?

Based on the context documents provided, as a service provider with access to personal information in New Jersey, you cannot ignore your obligations. There are specific requirements that you must follow to ensure the protection of personal information.

Requirements for Service Providers with Access to Personal Information in New Jersey

As per NJAC 10:41-4.1(a), all providers, including those under contract with the Division or licensed by the Department, shall secure records of individuals in their care against access, loss, defacement, use, and copying by unauthorized persons. Additionally, NJAC 10:41-3.2(b) states that investigations of unusual incidents, initial unusual incident reports and unusual incident follow-up reports, any and all documents and materials related to a pending investigation of an unusual incident, addresses of community residences licensed by the Department, intra- and inter-agency communications and procedures that are considered by the Division to be advisory, consultative, and deliberative material, risk management documents, and self-critical analyses are not public and can only be released upon judicial order.

Furthermore, NJAC 13:45D-4.3(a) requires all telemarketers making any telemarketing sales call to a New Jersey customer to disclose the name of the person making the call, the name of the telemarketing entity making the call, the name of the person or entity on whose behalf the call is being made, and the purpose of the call within the first 30 seconds of such call.

Conclusion

As a service provider with access to personal information in New Jersey, you cannot ignore your obligations. You must follow the requirements outlined in NJAC 10:41-4.1(a), NJAC 10:41-3.2(b), and NJAC 13:45D-4.3(a) to ensure the protection of personal information.

Jurisdiction

New Jersey

• Privacy