--- title: What to Know About New Hampshire's Privacy Law - TrueVault description: New Hampshire has passed the second comprehensive privacy law of 2024, joining the growing list of states that protect their residents' personal data. image: https://safe.truevault.com/hubfs/images/new-hampshire-new-law.png --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resources](https://safe.truevault.com/learn/?hsLang=en) - Login - Login - [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) - [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resource Center](https://safe.truevault.com/learn/) # What to Know About New Hampshire's Privacy Law ![new-hampshire-mountains](https://safe.truevault.com/hubfs/images/new-hampshire-mountains.jpg "new-hampshire-mountains")   New Hampshire has become the 15th state (if you count [Florida's](https://safe.truevault.com/resources/florida/the-digital-bill-of-rights-floridas-unusual-privacy-law?hsLang=en) unusual law) to pass its own comprehensive privacy law. The Expectation of Privacy Act (its official title is “An Act Relative to the Expectation of Privacy”) is further proof of state lawmakers’ continuing concerns over how their constituents' personal data is being collected, used, and shared online. Here’s a quick summary of the NHEPA and how it will affect businesses. ## When Does the NHEPA Go into Effect? The effective date of the New Hampshire privacy law is January 1, 2025. ## Which Businesses Does It Apply To? The NHEPA uses criteria similar to those used in most other states, based on the number of consumers whose personal data is processed. Businesses will have to comply with the New Hampshire privacy law if they do business in the state (or target their products or services to state residents) and meet at least one of the two following requirements: 1. Control or process the personal data of at least 35,000 consumers (excluding data processed solely for the purpose of completing a payment transaction) in one year; OR 2. Control or process the personal data of at least 10,000 consumers in one year AND derive more than 25 percent of gross revenue from the sale of personal data The law also contains a number of broad exemptions, including for nonprofit organizations, government bodies, institutions of higher education, financial institutions, and entities that are regulated by HIPAA. ### What Rights Do Consumers Have Under the NHEPA? New Hampshire’s privacy law gives consumers the following rights. - **Right to Know** - Consumers have the right to confirm whether a business is processing their personal data and, if so, to access that data. - **Right to Correct** - Consumers can request that a business correct any inaccurate personal information it holds about a consumer. - **Right to Delete** - Upon request, businesses must delete personal data provided by or obtained about the consumer. - **Right to Portability** - Upon request, businesses must provide a copy of the consumer’s personal data in a readily portable format so that it can be transmitted to another controller, if that data is processed by automated means. - **Right to Opt Out** - Consumers can opt out of: ## What Types of Data Are Covered? The NHEPA protects “personal data,” which is “any information that is linked or reasonably linkable to an identified or identifiable individual.” Deidentified data or publicly available information is excluded from this definition. Personal data is more than just names and email addresses, though, and can cover anything from IP addresses to internet cookies to shopping habits.  As with other state laws, the NHEPA requires businesses to get a consumer’s consent before processing any of their “sensitive data,” which means: - Data revealing racial or ethnic origin - Data revealing religious beliefs - Data revealing any mental or physical health condition or diagnosis - Data revealing sex life or sexual orientation  - Data revealing citizenship or immigration status - The processing of genetic or biometric data for the purpose of uniquely identifying an individual - Personal data collected from a known child (under 13 years old) - Precise geolocation data ## Are Data Protection Assessments Required? In what has become a standard rule, the New Hampshire law requires organizations to perform data protection assessments for any processing activities that present a “heightened risk of harm” to consumers. Processing that presents a heightened risk of harm includes: - Targeted advertising - Sale of personal data - Profiling of consumers, where it presents a foreseeable risk of harm - Processing of sensitive data ## How Much Do Violations Cost? Violations of the New Hampshire privacy bill are punishable under the state's unfair trade practices law, carrying a maximum fine of $10,000 per violation. ## Can Businesses Be Sued by Consumers? The New Hampshire privacy law has no private right of action, meaning consumers cannot sue businesses for violations. Only the state’s Attorney General may enforce the NHEPA. ## Cross-Country Privacy Compliance The pace of state privacy legislation is picking up, with many more states likely to pass their own laws in the near future. With each new law, compliance becomes a little more complicated to manage, especially for businesses without in-house privacy experts. TrueVault US helps businesses of all sizes get compliant with privacy laws from across the country with one streamlined platform. Designed by attorneys, TrueVault US is a software solution that guides you at every step of the way, from onboarding vendors to responding to consumer privacy requests. To learn more about how TrueVault US can help your business, [contact our team](https://www.truevault.com/contact-us?hsLang=en) today.   [![Schedule Call](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/949d85da-b649-4822-b380-0922b22c3b60.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/949d85da-b649-4822-b380-0922b22c3b60) **Disclaimer:** This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions. - ON THIS PAGE - [When Does It Go into Effect?](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#when) - [Who Must Comply?](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#who) - [What Rights to Consumers Have?](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#rights) - [What Is Personal Data?](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#personal-data) - [Data Protection Assessments](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#dpa) - [Cost of Violations](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#violations) - [Private Right of Action](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#right-of-action) - [Cross-Country Compliance](https://safe.truevault.com/resources/new-hampshire/what-to-know-about-new-hampshires-privacy-law#compliance) ##### Get compliant today Our attorney-designed software will step-by-step guide you through the compliance process from start to finish. [Request a Demo](https://www.truevault.com/contact-us?hsLang=en) ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2024 © All Rights Reserved.  [Privacy Policy](https://privacy.truevault.com/privacy-policy)  |  [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use?hsLang=en)  |  [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use?hsLang=en) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)