Technology

HB 1317 strengthens patient privacy protections in New Hampshire by prohibiting state agencies, contractors, vendors, and grant recipients from sharing personally identifiable medical, disability, or mental health data with the federal government or third parties - unless specific conditions apply. These exceptions include obtaining an individual’s written consent, complying with existing law or court orders, or disclosing data to provide necessary health care services. The bill also requires that any permitted disclosure share only the minimum necessary data and prioritize de-identified information when possible. It explicitly affirms that these state rules do not override federal privacy laws like HIPAA or the ADA, and violations could result in civil penalties enforced by the attorney general.

HB 1460 prohibits companies and services that collect children's data from selling their location or other sensitive information. It directly affects businesses operating apps, websites, or platforms that gather data from minors, banning the sale regardless of parental consent. The bill amends New Hampshire's data privacy law (RSA 507-H) by adding a new requirement that covered entities cannot sell children's data, building on existing federal COPPA rules. The law takes effect January 1, 2027, without new state funding or positions.