HB 1650 establishes an age-appropriate design code for online businesses in New Hampshire that are likely accessed by minors. The bill limits how these businesses can collect and use personal data from children, including preventing the use of data that might lead to repetitive use disrupting major life activities like sleeping or schoolwork. It requires businesses to verify a user's age and set default privacy settings that protect minors. The attorney general is authorized to create rules for enforcing these requirements.
HB 1283 prohibits New Hampshire state agencies and law enforcement from using face recognition technology without a warrant supported by probable cause or under specific legal exceptions. It directly affects state departments, police departments, and municipal entities that previously used this technology for identification purposes. The bill makes evidence collected through unauthorized use inadmissible in court and imposes class A misdemeanor penalties for violations. Key provisions require warrants for any state use, ban access to facial databases by third parties, and establish strict evidence rules to prevent misuse. This bill aims to limit surveillance capabilities while protecting privacy rights through clear legal safeguards.
HB 1460 prohibits companies and services that collect children's data from selling their location or other sensitive information. It directly affects businesses operating apps, websites, or platforms that gather data from minors, banning the sale regardless of parental consent. The bill amends New Hampshire's data privacy law (RSA 507-H) by adding a new requirement that covered entities cannot sell children's data, building on existing federal COPPA rules. The law takes effect January 1, 2027, without new state funding or positions.
HB 1589, the Digital Choice Act, requires social media companies operating in New Hampshire to let users access and share their personal data across platforms. It directly affects New Hampshire residents who use social media services and the companies that provide them. The bill mandates that companies implement open technical standards allowing users to download their social interactions (like posts, connections, and public engagement) in a portable format and share this data with other platforms, while excluding private messages. Users gain the right to delete their data or obtain a copy they can easily transfer, with companies required to secure data and maintain interoperability through non-discriminatory terms. The law does not apply to email, cloud storage, or document services.
HB 1729 would establish a state-managed process for New Hampshire public school districts to adopt a centralized administrative software platform. The Department of Education must develop a competitive request for proposals (RFP) for vendors to provide a cloud-based system handling finance, human resources, student data, and other school operations, with mandatory data security and FERPA compliance. Participation in the service would be strictly voluntary for districts, with the state providing technical assistance and transition support for those who choose to join. The bill includes funding to support the RFP development, stakeholder engagement, and district onboarding efforts.
HB 1436 establishes legal property rights for personal digital information stored in cloud services, such as emails, photos, or documents. It presumes that individuals retain ownership of their unpublished digital data (including cloud-stored files) and creates a legal presumption of bailment when third parties hold this information. The bill requires government entities to obtain a warrant for searches or seizures of such digital records, treating them as protected "papers" under constitutional and state law. It directly affects consumers whose personal data is stored with cloud providers, distinguishing private digital content from public information while exempting certain public or emergency uses.
SB 648 requires websites and apps that profit from distributing material harmful to minors (defined as content appealing to prurient interest, depicting sexual conduct offensively, and lacking value for minors) to implement age verification. It mandates that commercial entities using reasonable methods (like government ID checks without storing data) verify users are 18+, post clear warnings, and not retain personal information. Parents or guardians can sue for up to $10,000 per violation if a minor accesses such content due to non-compliance, while the attorney general can seek $25,000 penalties. Exemptions include news organizations, libraries, museums, and educational institutions distributing content for legitimate purposes. The law takes effect January 1, 2027.
HB 1694 requires data brokers operating in New Hampshire to register with the Secretary of State and pay a $300 fee, creating a searchable online registry of these entities. It gives consumers the right to opt out of data processing for targeted advertising or sale, and mandates that data brokers notify consumers within 15 days when their data is deleted or opt-out requests are processed. The bill specifically protects minors by requiring data brokers to disclose child data practices and comply with child privacy laws, with special rules for "known minors" (children under 18 whom a website knows are minors). This directly affects data brokers, website operators, and all New Hampshire residents whose personal data is collected or sold.
This bill establishes consumer protections for digital kiosks that allow people to buy, sell, or transfer digital assets (like cryptocurrency) using cash. It requires kiosks to hold first-time transactions for 48 hours (with a cancellation option), limit daily spending to $5,000 for new users and $15,000 for existing users, and display clear warnings about scams (e.g., "no government agency will ever demand payment by crypto"). Operators must verify identities, block transactions to known scam addresses, disclose all fees and reference prices, and provide detailed receipts. These rules directly affect kiosk operators and consumers, particularly older adults targeted by scammers.
