Privacy Map

New Hampshire. Comprehensive data protection. Act

NH privacy lawNew Hampshire Expectation of Privacy Act (RSA 507-H)

In force
Partly verifiedMedium confidence. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.

§1Summary

Synopsis

Connecticut-style comprehensive law with standard rights, opt-outs, sensitive data consent and data protection assessments.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
Unique features

Low thresholds (35,000 consumers, or 10,000 with 25%+ revenue from sales).

SaaS relevance

SaaS with modest New Hampshire user numbers can be caught.

§2Obligations

Extraterritorial
Yes
Breach notification
See RSA 359-C:20 (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
Up to $10,000 per violation

§3Dates

Key dates
  • Adopted
  • In force
  • Cure period ended 2025-12-31.

§4Text and authority

Text
Authority
New Hampshire Attorney General (Consumer Protection Bureau)

§5Where it applies

Domestic law of
New Hampshire

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.