Cure period

A window of time after a violation is identified during which a company can fix the problem before penalties apply. Many state privacy laws include cure periods of 30 to 60 days, but several are sunsetting. Connecticut expired in December 2024 and New Jersey expires on July 15, 2026 (profiling cure under NJDPA). Once a cure period expires, regulators can pursue penalties immediately.