Law / United States / 
New Hampshire
SB 255, New Hampshire Privacy Act
N.H. Rev. Stat. Ann. ch. 507-H (2024 N.H. Laws ch. 5)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 1 January 2025.
An age-appropriate design code rule binding private bodies.
As of 15 July 2026.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Bars a controller from processing personal data for targeted advertising or from selling it, without consent, where the controller has actual knowledge or willfully disregards that the consumer is at least 13 and under 16 years old, and requires a data protection assessment for any processing activity that presents a heightened risk of harm to consumers, including minors.
If you get it wrong
Private right of actionNo
Penalties
Enforced as a violation of the Consumer Protection Act by the Attorney General, with a mandatory cure period through December 31, 2025
Who enforces it
Enforcement body
New Hampshire Department of Justice, Data Privacy Unit
What it reaches
Age threshold
16
Covered services
Controllers subject to the New Hampshire Privacy Act processing data of a known minor age 13 to 15
When LexLint raises it
serves_minors
Read the law
official New Hampshire Revised Statutes Annotated text on the General Court website
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.