NH Consumer Privacy Act

New Hampshire Data Privacy Act (SB 255)
New Hampshire · RSA 507-H (2024 NH SB 255)

Status
In effect
Took effect
January 1, 2025
Applies to
Controllers/processors meeting thresholds
Enforced by
New Hampshire Attorney General

New Hampshire residents can access, correct, delete, and port their personal data, and opt out of targeted advertising, data sales, and profiling used in solely automated decisions. Applies at low thresholds (35,000 residents), so it covers many businesses.

Who is protected: New Hampshire residents

Legal detail

RSA 507-H (SB 255, eff. Jan. 1, 2025); 35,000-consumer or 10,000/25%-revenue thresholds; profiling opt-out for solely automated significant decisions; data protection assessments; AG-only enforcement with 60-day cure (first year).

Key facts

JurisdictionNew Hampshire
LevelState
StrengthLimited
EnactedMarch 6, 2024
CitationRSA 507-H (2024 NH SB 255)
Private right of actionNo, agency enforcement only
PenaltiesCivil penalties via AG; no private right of action
Topicsconsumer data privacy · automated decision-making · consumer protection · data retention
Agency pageNew Hampshire Data Privacy Act — Official DOJ FAQ

More AI rules in New Hampshire

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.