Court Rules
All enforcement actions
GuidanceLow Risk

New Jersey Bureau of Securities Annual Examination Focus on AI and Cybersecurity

New Jersey Bureau of SecuritiesJune 8, 2026New Jersey Attorney General

Summary

The New Jersey Bureau of Securities announced its 2026 annual investment adviser examination, with a particular focus on firms' use of artificial intelligence and cybersecurity protocols. The examination requires nearly 800 registered investment adviser firms to answer questions about AI use in portfolio management, data protection policies, and third-party vendor due diligence. Failure to comply may result in administrative action.

Remedy

Firms must complete the electronic examination by June 30, 2026, providing detailed responses about AI use, cybersecurity policies, employee training, and third-party vendor due diligence. Non-compliance may lead to administrative action.

Reporting Requirements

Contract Impact

In-house legal teams should review vendor agreements with third-party service providers, particularly those handling client data or providing AI tools. Key clauses to examine include data protection and cybersecurity requirements, vendor due diligence obligations, and provisions for periodic security audits. Additionally, customer agreements should be reviewed for disclosures about AI use in investment recommendations and data handling practices. Employee contracts and training policies should also be updated to reflect new cybersecurity and AI compliance requirements.

Contract Search Terms

artificial intelligencecybersecurity policythird-party vendor due diligencedata protectionemployee traininginvestment portfolioclient data safeguardsvendor cybersecurity procedures

Laws Cited

N.J.A.C. 13:47A-14.16
N.J.A.C. 13:47A-14.16

Violation Types

Entity Details

Entity

New Jersey Bureau of Securities

Industry

Financial Services

Official Sources

Source Evidence

Entity Name
"New Jersey Bureau of Securities"
Laws Cited
"N.J.A.C. 13:47A-14.16"
Violation Types
"the examination takes a close look at the use of Artificial Intelligence (AI) in the construction of investment portfolios or recommendations to clients"
Violation Types
"The examination also focuses on online data protection, seeking to determine whether firms have written policies and procedures on cybersecurity"
Remedy Types
"Each registered investment adviser is required to complete the examination in the electronic format provided no later than June 30, 2026"

Related Enforcement Actions

NJ

23andMe, Inc.

$18.0M

Attorney General Jennifer Davenport joined a bipartisan coalition of 42 attorneys general in announcing a settlement with the bankruptcy trustee for 23andMe, resolving allegations from a 2023 data breach that compromised genetic data of 6.9 million people worldwide, including nearly 150,000 in New Jersey. The settlement provides $18 million to states from available bankruptcy funds, plus enhanced data security and consumer deletion rights for the successor entity, 23andMe Research Institute.

NJ

Block, Inc.

$45.0M

Block, Inc. agreed to a $45 million multistate settlement with 46 states for allegedly misleading consumers about the safety of Cash App, failing to protect users from fraud, and not providing promised fraud protection. The settlement requires Block to improve customer support, stop misleading claims, and educate consumers about fraud.

NJ

Office of the Attorney General of New Jersey

Attorney General Jennifer Davenport co-led a coalition of 49 attorneys general in calling on the FCC to strengthen rules to cut off scammers' access to legitimate telephone numbers. The coalition's letter requests stronger certification rules, regular reporting, and prohibitions on number cycling to combat illegal robocalls.

NJ

State of New Jersey

Governor Sherrill and Attorney General Davenport announced coordinated executive actions to reduce and eliminate junk fees in New Jersey. The initiative includes an Executive Order directing state agencies to review industries for junk fees and an Enforcement Statement from the Division of Consumer Affairs explaining how junk fee practices may violate the New Jersey Consumer Fraud Act.

NJ

Xiao Hu

The New Jersey Bureau of Securities filed a lawsuit against Xiao Hu (aka Mark Hu) and his companies Skyline Technology USA LLC and Thunderbirds.ME, Inc. for allegedly defrauding at least 15 investors out of $2.5 million through unregistered securities offerings. Hu allegedly misappropriated at least $280,000 for personal expenses including a home purchase and vacation, and falsely claimed to have a Ph.D. from Columbia University.

NJ

FIFA

New Jersey and New York Attorneys General announced an investigation into FIFA's ticketing practices for the 2026 World Cup. The investigation focuses on reports that fans were misled about seat locations, faced soaring prices due to variable pricing, and did not receive the tickets they paid for. Subpoenas have been sent to FIFA seeking information about its ticketing practices for matches hosted in New Jersey.