Law / United States / 
New Hampshire
New Hampshire Data Privacy Act, sensitive data and biometric data definitions
RSA 507-H:1, IV, XXVIII; RSA 507-H:6
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 1 January 2025.
A sensitive categories rule binding private bodies.
As of 27 August 2026.
What it requires
- Obtain a New Hampshire consumer's opt-in consent before processing sensitive data, including genetic or biometric data processed to uniquely identify the individual, racial or ethnic origin, religious belief, a health condition, sexual orientation, citizenship or immigration status, a known child's data, or precise geolocation.
- Treat a voiceprint or faceprint you deliberately extract from a photograph, video, or audio recording to identify a specific individual as covered biometric data. New Hampshire's exclusion for recording-derived data does not reach data generated for that purpose, even where the source recording was itself publicly available.
What it reaches
Excludes recording-derived identifiersNo
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
NHDPA classifies genetic or biometric data processed to uniquely identify a person, along with racial or ethnic origin, religious belief, a health condition, sexual orientation, citizenship or immigration status, a known child's data, and precise geolocation, as sensitive data requiring the consumer's opt-in consent.
"Biometric data" means data from automatic measurement of a biological characteristic, such as a fingerprint, voiceprint, or eye retina or iris, used to identify a specific individual; the definition excludes a photograph, or data from an audio or video recording, only until that data is generated to identify a specific individual, at which point the exclusion lifts and the data is biometric, and sensitive, data.
When LexLint raises it
processes_biometricsprocesses_voicecrawls_webtrains_models
Read the law
official New Hampshire statute text, RSA chapter 507-H, New Hampshire General Court website
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.