Privacy
New Hampshire consumer data privacy law
Applies to persons that conduct business in New Hampshire or target products or services to its residents and that, in a year, controlled or processed the personal data of at least 35,000 unique consumers (not counting data processed only to complete a payment), or of at least 10,000 consumers while deriving more than 25 percent of gross revenue from selling personal data. State agencies, political subdivisions, and nonprofit organizations are excluded.
What the website needs
- Consumers can opt out of targeted advertising and the sale of their personal data, including through an opt-out preference signal sent by a browser or other mechanism that meets the statute’s requirements (RSA 507-H:6).
- Controllers respond to a consumer’s request within 45 days, extendable once by 45 more days when reasonably necessary, and tell the consumer about any extension within the first 45 days (RSA 507-H:4).
- A consumer may use an authorized agent to opt out of targeted advertising or the sale of personal data (RSA 507-H:4 and 507-H:5).


