The Governor of New Hampshire has signed into law Senate Bill 255, positioning New Hampshire as the fifteenth state in the U.S. to enact a comprehensive privacy law. The new law, effective January 1, 2025, targets businesses operating within the state or offering products or services to New Hampshire residents. It applies to entities that, annually either: (1) control or process the personal data of at least 25,000 New Hampshire residents (excluding data processed solely for payment purposes) or (2) control or process the personal data of at least 100,000 New Hampshire residents and earn over 25% of their revenue from the sale of personal data.

The law follows the blueprint of similar state privacy laws in the U.S., laying down principles such as data minimization, a right to opt-out from the sale of personal information or use of personal information for online targeted advertising, and the need to obtain data subject consent to process sensitive data. Impact assessments will be required for processing activities that pose a heightened risk of harm.

Click here to read New Hampshire’s Privacy Law.