New Hampshire Enacts A Comprehensive Privacy Law

On March 6, New Hampshire Governor Chris Sununu signed Senate Bill 255 (SB 255) into law. New Hampshire joins California, Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia in enacting a comprehensive state data privacy law.

Applicability

SB 255 tracks closely with the Connecticut Data Privacy Act. However, there are several nuances. The law applies to persons that conduct business in the state of New Hampshire or that produce products or services that target New Hampshire residents and, in the period of a year, controlled or processed the personal data of (1) at least 35,000 unique consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or (2) at least 10,000 unique consumers and derived more than 25 percent of their gross revenue from the sale of personal data.