Your New Hampshire consumer data rights
In effect
The New Hampshire Data Privacy Act gives New Hampshire residents rights over the personal data that covered businesses collect about them. It has been in effect since January 1, 2025.
- Who or what it protects
- New Hampshire residents, in their dealings with businesses in New Hampshire or targeting its residents that, in a year, process the personal data of at least 35,000 unique consumers, or of at least 10,000 while earning more than 25 percent of their gross revenue from selling personal data. State and local government, nonprofits, colleges and universities, financial institutions covered by federal banking privacy law and organizations covered by HIPAA are exempt.
- What you can do
- You can confirm whether a business processes your personal data and see it, correct it, delete data you provided or that it obtained about you, and get a copy you can take elsewhere. You can opt out of targeted advertising, the sale of your data, and solely automated profiling with legal or similarly significant effects, including through an opt-out preference signal or global device setting. A business must get your consent to process sensitive data, and to sell the data of, or target ads at, a teen it knows is 13 to 15. Use the method in the company's privacy notice. It must respond within 45 days, which it can extend by 45 days. If it denies your request, you can appeal; it has 60 days to answer, and if it denies the appeal it must give you a way to contact the Attorney General. You can report a violation to the Department of Justice.
- Limits and eligibility
- Only the New Hampshire Attorney General enforces the law. A business can deny a request it cannot verify. At least one request a year is free.
- Who oversees it
- New Hampshire Department of Justice, Data Privacy Unit
- The law
- New Hampshire Data Privacy Act
More official places to go
Checked against the official sources on October 6, 2026. Links last checked October 7, 2026.