HB 621 allows birth mothers in New Hampshire to choose whether to share personal details (like name or address) from their birth worksheet with state agencies. This directly affects birth mothers, who will receive written notice about information sharing and can limit disclosure to only essential data for vital records and public health. The key mechanism requires hospitals to redact personal identifiers before sharing minimal statistical information with agencies like the Department of Health and Human Services, updating existing information-sharing protocols. The bill does not change current law’s "refused to provide" option but formalizes an active opt-out process through written notice and medical record documentation.
HB 330 prohibits unauthorized copying, retention, or scanning of driver's license data - except for specific government purposes like voting verification or court orders. It imposes fines of at least $100,000 per violation for individuals (misdemeanor) and entities (felony), plus lifetime identity theft protection for affected residents, with $100,000 per person fines for data breaches. The bill directly affects government agencies, private businesses, and anyone handling driver's license information, strengthening privacy protections for New Hampshire residents' personal data. It takes effect January 1, 2026, and aligns with the state’s finding that license data is constitutionally confidential.
HB 1650 establishes an age-appropriate design code for online businesses in New Hampshire that are likely accessed by minors. The bill limits how these businesses can collect and use personal data from children, including preventing the use of data that might lead to repetitive use disrupting major life activities like sleeping or schoolwork. It requires businesses to verify a user's age and set default privacy settings that protect minors. The attorney general is authorized to create rules for enforcing these requirements.
This bill prohibits elected officials from publicly sharing a constituent's personal information online with the intent to harass, threaten, or incite violence. It defines "personal information" broadly to include addresses, phone numbers, social media profiles, photos, and online identifiers. Violators face misdemeanor penalties of up to $500 or one year in jail, and constituents can request removal of their information by providing evidence of an immediate safety threat. The law applies to state and local elected officials and takes effect January 1, 2027.
HB 1460 prohibits companies and services that collect children's data from selling their location or other sensitive information. It directly affects businesses operating apps, websites, or platforms that gather data from minors, banning the sale regardless of parental consent. The bill amends New Hampshire's data privacy law (RSA 507-H) by adding a new requirement that covered entities cannot sell children's data, building on existing federal COPPA rules. The law takes effect January 1, 2027, without new state funding or positions.
HB 1154 restricts sending unsolicited text messages for commercial advertisements or political campaigns without the recipient's prior permission. It requires senders to obtain express consent (in writing or otherwise) before texting ads, with exceptions for established business relationships or numbers voluntarily shared in such contexts. The bill mandates clear opt-out mechanisms in every message and prohibits using multiple numbers to evade blocking. Violations carry criminal penalties (up to a class B felony for repeated offenses) or civil fines of $250-$2,000 per incident, effective July 1, 2027.
HB 1589, the Digital Choice Act, requires social media companies operating in New Hampshire to let users access and share their personal data across platforms. It directly affects New Hampshire residents who use social media services and the companies that provide them. The bill mandates that companies implement open technical standards allowing users to download their social interactions (like posts, connections, and public engagement) in a portable format and share this data with other platforms, while excluding private messages. Users gain the right to delete their data or obtain a copy they can easily transfer, with companies required to secure data and maintain interoperability through non-discriminatory terms. The law does not apply to email, cloud storage, or document services.
HB 1436 establishes legal property rights for personal digital information stored in cloud services, such as emails, photos, or documents. It presumes that individuals retain ownership of their unpublished digital data (including cloud-stored files) and creates a legal presumption of bailment when third parties hold this information. The bill requires government entities to obtain a warrant for searches or seizures of such digital records, treating them as protected "papers" under constitutional and state law. It directly affects consumers whose personal data is stored with cloud providers, distinguishing private digital content from public information while exempting certain public or emergency uses.
HB 1316 restricts New Hampshire state agencies from collecting or disclosing personally identifiable autism-related data (such as an individual's autism diagnosis) unless the data is used for specific, limited purposes like administering benefits, providing medical care, or complying with education laws. Agencies must ensure any data collection complies with federal privacy laws (like HIPAA) and avoid using data scraping technology. Disclosure outside state government requires the individual’s or guardian’s written consent, court order, or necessity for essential services like education or healthcare. The bill explicitly preserves existing disability protections under federal laws like the Americans with Disabilities Act and IDEA.
HB 1694 requires data brokers operating in New Hampshire to register with the Secretary of State and pay a $300 fee, creating a searchable online registry of these entities. It gives consumers the right to opt out of data processing for targeted advertising or sale, and mandates that data brokers notify consumers within 15 days when their data is deleted or opt-out requests are processed. The bill specifically protects minors by requiring data brokers to disclose child data practices and comply with child privacy laws, with special rules for "known minors" (children under 18 whom a website knows are minors). This directly affects data brokers, website operators, and all New Hampshire residents whose personal data is collected or sold.
