Duty LXD-1835
Makes high-risk automated decisions, in New Hampshire
Genetic testing in employment: limits on employers, labor organizations, employment agencies and licensing agenciessince 4 lines
RSA 141-H:3 · Read the law's page
- If you are an employer, labor organization, employment agency or licensing agency, do not directly or indirectly solicit, require or administer genetic testing relating to any individual as a condition of employment, labor organization membership or licensure (RSA 141-H:3, I(a)).
- Do not affect the terms, conditions or privileges of employment, labor organization membership or licensure, or terminate any individual, based on genetic testing (RSA 141-H:3, I(b)).
- Do not sell or otherwise provide to an employer, labor organization, employment agency or licensing agency any genetic testing relating to an employee, member or licensee or a prospective one, except as RSA 141-H:3, IV allows (RSA 141-H:3, II).
- Do not offer employment, membership, licensure, or any pay or benefit in return for an individual taking a genetic test (RSA 141-H:3, III).
New Hampshire Data Privacy Act, consumer rightssince 3 lines
RSA 507-H:4 · Read the law's page
- Give a New Hampshire consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
- Offer a New Hampshire consumer an opt-out of targeted advertising, the sale of personal data, and profiling with legal or similarly significant effects.
- Respond to a consumer rights request without undue delay and no later than 45 days after receipt, with one 45-day extension available, and decide an appeal of a refusal within 60 days.
New Hampshire Data Privacy Act, data protection assessmentssince 3 lines
RSA 507-H:8 · Read the law's page
- Conduct and document a data protection assessment for each of your processing activities that presents a heightened risk of harm to a New Hampshire consumer, including targeted advertising, the sale of personal data, profiling that presents a reasonably foreseeable risk of unfair treatment, injury, intrusion or other substantial injury, and the processing of sensitive data (RSA 507-H:8, I).
- In each assessment, identify and weigh the benefits of the processing to you, the consumer, other stakeholders and the public against the risks to the consumer as the safeguards you employ mitigate them, and factor in de-identified data, consumers' reasonable expectations, the context of the processing and your relationship with the consumer (RSA 507-H:8, II).
- Make a data protection assessment available to the attorney general when the attorney general requires its disclosure for an investigation (RSA 507-H:8, III).