Law note · New Hampshire
New Hampshire Data Privacy Act, consumer rights
NHDPA gives a New Hampshire consumer the right to confirm and access their personal data, correct inaccuracies, delete data, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and profiling with legal or similarly significant effects.
A controller must respond without undue delay and no later than 45 days after receipt, with one 45-day extension available if the controller informs the consumer within the initial period, and must offer an internal appeal of a denial, decided within 60 days, after which the consumer may complain to the Attorney General.
What it asks of an app
- Give a New Hampshire consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
- Offer a New Hampshire consumer an opt-out of targeted advertising, the sale of personal data, and profiling with legal or similarly significant effects.
- Respond to a consumer rights request without undue delay and no later than 45 days after receipt, with one 45-day extension available, and decide an appeal of a refusal within 60 days.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official New Hampshire statute text, RSA chapter 507-H, New Hampshire General Court website