Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

New Jersey’s New Data Broker Law Imposes Compliance Obligations on Entities That Provide Personal Data to Data Brokers, Prohibits the Sale of Sensitive Data

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

New Jersey became the latest state to enact legislation regulating data brokers –Assembly Bill 5328. In addition to regulating...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

We are Morrison Foerster — a global firm of exceptional credentials. Our clients include some of the largest financial institutions, investment banks, and Fortune 100, technology, and life sciences companies. Our lawyers are committed to achieving innovative and business-minded results for our clients, while preserving the differences that make us stronger.Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Prior results do not guarantee a similar outcome.

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

New Jersey became the latest state to enact legislation regulating data brokers –Assembly Bill 5328. In addition to regulating traditional data brokers, the law imposes obligations on “data collectors”—businesses that sell or license to data brokers the personal data of consumers with whom they have a direct relationship.Read the <a href="https://datadecoded.mofo.com/topics/new-jersey-s-new-data-broker-law-imposes-compliance-obligations-on-entities-that-provide-personal-data-to-data-brokers-prohibits-the-sale-of-sensitive-data" target="_blank">full blog post</a>.

New Jersey’s New Data Broker Law Imposes Compliance Obligations on Entities That Provide Personal Data to Data Brokers, Prohibits the Sale of Sensitive Data

Sign Up

Boris Segalis is a partner in Morrison Foerster’s Cyber, Data + Privacy Group. He advises companies at the intersection of data, technology, and regulation, helping them navigate complex legal frameworks while building and scaling data-driven products and services.As a leading privacy and cybersecurity lawyer, Boris’s practice is focused on issues where the law is evolving and the answers are not always clear. He works with clients to apply existing regulatory regimes to new technologies and business models, particularly in areas such as AI, data monetization, digital platforms, and emerging financial technologies. His work spans strategic product counseling, corporate transactions, and high-stakes regulatory matters, including representing companies in investigations by the Federal Trade Commission, state attorneys general, and global regulators.Clients rely on Boris for compliance advice and for practical guidance on how to operate in uncertain environments, whether designing new products, assessing regulatory risk, or responding to government scrutiny. He regularly advises on U.S. and global privacy and cybersecurity laws, including U.S. federal financial privacy laws, state privacy regimes, emerging AI requirements, and foreign privacy and cybersecurity regimes frameworks.He represents a broad range of companies, from high-growth startups to global public companies, across industries including technology, AI, financial services and Fintech, crypto, life sciences, consumer platforms, AdTech, and media.Boris has been recognized for seven consecutive years by Chambers USA in Privacy & Data Security and is also ranked by Chambers Global in Privacy & Data Security – USA. He is recognized by The Legal 500 as a leading lawyer in cyber law (including data privacy and data protection) and was previously named to Crain’s New York Business’s 40 Under 40.Boris holds a bachelor’s degree in mechanical engineering from Georgia Tech and a J.D. from New York University School of Law. He is a Certified Information Privacy Professional (CIPP/US) and has served as co-chair of the New York City KnowledgeNet chapter of the International Association of Privacy Professionals (IAPP), as well as on the IAPP Research Board. He graduated from Riga Simon Dubnow Jewish Secondary School in Riga, Latvia, in 1991.

Boris Segalis

Partner

Joshua Fattal advises clients across industries on data protection best practices, with a focus on emerging issues at the intersection of data privacy, security, and new technologies, including artificial intelligence (AI) and national security regulations pertaining to sensitive U.S. personal data.Joshua regularly counsels clients ranging from startups to multinational corporations on the legal implications of using AI and large language models (LLMs). He advises on compliance with global AI regulations, including the EU AI Act and Colorado AI Act, and provides guidance on AI governance, responsible AI use, and generative AI best practices.He also advises clients on compliance with U.S. laws and regulations governing the protection of sensitive data from adversary countries, including the U.S. Department of Justice Data Security Program and the Protecting Americans’ Data from Foreign Adversaries Act of 2024 (PADFAA). He has assisted in clients’ complex due diligence of their data use and disclosure practices and in developing cross-functional compliance programs to meet evolving cross-border data transfer requirements. He has represented multiple companies subject to investigation by the U.S. Federal Trade Commission and state attorneys general in connection with PADFAA and the disclosure of sensitive data.Joshua’s experience spans a variety of industries, including AI, technology, life sciences, edtech, fintech, crypto, and consumer services. He counsels clients on compliance under local, state, and federal privacy regulations such as the California Consumer Privacy Act (CCPA), biometric and financial data privacy laws, and cybersecurity regulations. He also guides clients through compliance with international frameworks like the General Data Protection Regulation (GDPR), the EU-U.S. Data Privacy Framework, and the EU ePrivacy Directive.His practice encompasses data incident response strategies, including breach investigations and regulatory notifications. He conducts privacy and cybersecurity due diligence for corporate transactions and advises on information security policies, cybersecurity governance, vendor risk management, and privacy-by-design product development. He also represents companies subject to privacy and consumer protection investigation by federal and state regulators.Joshua maintains an active pro bono practice. He has successfully secured asylum for multiple clients, including a Cameroonian political activist and a Honduran survivor of gender-based violence. He has also represented tenants in housing litigation and advised nonprofits on privacy and cybersecurity matters. Joshua served as a student mentor for the Historical Society of the D.C. Circuit 2026 Mock Court Program.Joshua earned his J.D. cum laude from NYU School of Law, where he was a Robert McKay Scholar and received the full tuition ASPIRE Cybersecurity Scholarship. He received his B.A. magna cum laude from Columbia University and is a member of Phi Beta Kappa. He previously served in the U.S. Intelligence Community, including as an attorney advisor in the Intelligence Law Division at the U.S. Department of Homeland Security. He also clerked for the Honorable Sarah Netburn, U.S. Magistrate Judge in the Southern District of New York.