United States of America: Introduced New Hampshire Act relative to the expectation of privacy (SB 255)

On 19 January 2023, the Act relative to the expectation of privacy (Senate Bill 255) was introduced in the New Hampshire State Senate. The Act contains data protection rights for consumers and obligations for controllers. Consumers would have the right to confirm whether a controller is processing their data and to request its deletion, correction, portability, or to opt out of the processing altogether. Controllers must usually comply with such requests within 45 days. Controller obligations include limiting data collection; implementing reasonable security; and providing a mechanism to revoke consent. Furthermore, controllers would be required to provide a clear privacy notice and disclose the sale of data to third parties. Finally, processing the personal data of subjects between the ages of 13 and 16 for targeted advertising or for sale to third parties without their consent would be prohibited. The law would take effect starting 1 January 2024.