{"data":{"id":"us-nj/n.j.-stat.-52-9yy-9","jurisdiction":"us-nj","citation":"N.J. Stat. § 52:9YY-9","heading":"Penalties for unauthorized disclosures; liability of department.","body":"9. a. A person or entity whom the department determines has violated the provisions of section 6 of P.L.2001, c.192 (C.52:9YY-6), regarding the disclosure of health data shall be subject, in addition to any other penalties that may be prescribed by law, to: a civil penalty of not more than $10,000 for each such violation, but not to exceed $50,000 in the aggregate for multiple violations; or a civil penalty of not more than $250,000, if the department finds that these violations have occurred with such frequency as to constitute a general business practice.\nThe penalty shall be sued for and collected in the name of the department in a summary proceeding in accordance with the \"Penalty Enforcement Law of 1999,\" P.L.1999, c.274 (C.2A:58-10 et seq.).\nb.\tThe department or an entity acting on its behalf shall be liable to a person or entity injured by the intentional or negligent violation of the provisions of section 6 of P.L.2001, c.192 (C.52:9YY-6), in an amount equal to the damages sustained by the person or entity, together with the cost of the action and reasonable attorney's fees, as determined by the court.\nL.2001, c.192, s.9; amended 2010, c.87, s.17.","path":["TITLE 52 STATE GOVERNMENT, DEPARTMENTS AND OFFICERS"],"source_url":"https://pub.njleg.state.nj.us/statutes/STATUTES-TEXT.zip","current_through":"P.L.2025, c.405, and J.R.22","vintage":"","retrieved_at":"2026-08-27T17:54:13Z","sha256":"ba7d7ac81b72fe3e16eaa9d83fd7603e43300d39e432b3a504f08eaf7523544d","source_id":"us-nj","stale":true,"prev":"us-nj/n.j.-stat.-52-9yy-8","next":"us-nj/n.j.-stat.-52-9z-1"},"notice":"GroundRules: Original legal text. Not legal advice."}