N.J. Stat. § 56:8-166.23: Violations; civil penalty.

5. A data broker, including a controller, or data collector, that sells, offers for sale, or licenses sensitive data in violation of paragraph (6) of subsection a. of section 9 of P.L.2023, c.266 (C.56:8-166.12) or section 3 of P.L.2026, c.25 (C.56:8-166.22) shall be liable to a civil penalty of $50,000 for each record sold, offered for sale, or licensed.

L.2026, c.25, s.5.