Privacy law coverage affecting New Hampshire: enforcement actions, legislation, court decisions and compliance deadlines, reported from primary sources.
New Hampshire has a comprehensive consumer privacy statute, the New Hampshire Data Privacy Act (NHPA). This page collects our coverage touching New Hampshire, alongside the federal rules that apply there. For the statute itself rather than the news, see our New Hampshire privacy law page.
New Hampshire's three-section breach subdivision took effect January 1, 2007 and has not been amended. It requires notice when misuse is likely or cannot be determined, routes the state notice to a primary regulator or the Attorney General, and gives injured persons a damages action that doubles or trebles for willful violations.
Read more →New Hampshire's 2014 workplace privacy act, HB 1407 (chapter 305), bars employers from asking for login information to an employee's or applicant's personal social networking account, forcing contact additions, or demanding lower privacy settings. It keeps employer equipment, employer accounts and two kinds of investigation outside the bar, and is enforced only by a labor commissioner penalty.
Read more →RSA chapter 507-H, in force since January 1, 2025, reaches businesses at 35,000 consumers, requires opt-out signals, conditions teen targeting on consent, and from 2027 bars selling a child's data. Violations are prosecuted under the consumer protection act at up to $10,000 each, and the chapter grants no rulemaking power.
Read more →