Law note · New Hampshire
New Hampshire Data Privacy Act, Attorney General enforcement
The New Hampshire Attorney General has exclusive authority to enforce NHDPA. The Attorney General was required to give a controller a notice of violation and 60 days to cure through December 31, 2025, and may do so at its discretion afterward; an uncured violation is treated as an unfair trade practice under RSA 358-A, subject to a civil penalty of up to $10,000 per violation, and the chapter creates no private right of action.
What it asks of an app
- Expect NHDPA violations to be enforced exclusively by the New Hampshire Attorney General, never by a private plaintiff.
- Cure a noticed violation within 60 days of an Attorney General notice of violation to avoid a civil penalty of up to $10,000 per violation under New Hampshire's unfair trade practices law.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official New Hampshire statute text, RSA chapter 507-H, New Hampshire General Court website