Privacy Law Library

New Jersey Insurance Information Practices Act

NJ IIPA

Financial · Health · Genetic

New Jersey's version of the NAIC insurance privacy model law requires insurers, agents, and insurance-support organizations to give written notices of their information practices, to let people see and correct recorded personal information about them, and to disclose personal or privileged information only with written authorization or under listed exceptions.

Where
New Jersey
Citation
N.J.S.A. 17:23A-1 et seq. (key sections 17:23A-4, 17:23A-8, 17:23A-13); P.L.1985, c.179
Status
In force
Enforced by
New Jersey Commissioner of Banking and Insurance; individuals (remedies not verified)
People can sue
Limited
Penalties
Not verified: the Act's penalty and individual-remedy sections (17:23A-17 to 17:23A-20) could not be retrieved from the statutes database.
Applies to
  • Insurance institutions, agents, and insurance-support organizations that collect, use, or disclose personal or privileged information in connection with insurance transactions (17:23A-4, -8, -13)
  • Also governs consent and access for genetic information used by life and disability income insurers (see N.J.S.A. 10:5-45(b), 10:5-46(e))

What a privacy notice must say

  • Give applicants and policyholders a written notice of insurance information practices, including whether information may be collected from others, the types of information and sources or investigative techniques, and the disclosures that may be made, at application and at specified renewal or reinstatement points.N.J.S.A. 17:23A-4(a)-(b)

Rights it gives people

  • On a written request with proper identification, within 30 business days describe recorded personal information, let the individual see and copy it, and identify those to whom it was disclosed in the prior two years.N.J.S.A. 17:23A-8(a)

Practices it requires

  • Do not disclose personal or privileged information collected in an insurance transaction without the individual's dated, signed written authorization (valid for up to one year) unless a listed exception, such as performing an insurance function for the discloser, applies.N.J.S.A. 17:23A-13

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: Effective date of P.L.1985, c.179, the correction right (17:23A-9), the adverse-underwriting notice rule (17:23A-10), and the enforcement/remedy sections were not retrieved. | Whether an individual may sue for damages (and the amount) under the Act was not confirmed; 'limited' is provisional.

Research reference, not legal advice.