New Hampshire Children’s Privacy Laws (2026)

HB 1460 (2026), Chapter 168

Enacted, not yet effective · Design code · effective 2027-01-01 · binds operators

Ages: Children under 13 (COPPA definition of 'child')

Requires: Amends the NH Data Privacy Act (RSA 507-H:6) to impose a blanket ban on selling a child's personal data (including location and other sensitive data) by controllers covered by the privacy law. The prohibition applies regardless of whether the entity has actual knowledge the data belongs to a child and regardless of parental consent, going beyond the existing COPPA-aligned consent baseline. 'Child' tracks COPPA (under 13). Signed by Gov. Ayotte 06/19/2026 as Chapter 168; effective 01/01/2027. Note: a separate formal NH Age-Appropriate Design Code, HB 1650 (Litchfield), was killed 'Inexpedient to Legislate' on 03/11/2026, so HB 1460 is the enacted child-specific data-protection statute.

Entry last reviewed 2026-10-01

SB 255 (2024); codified at RSA 507-H

In force · Privacy law (minors) · effective 2025-01-01 · binds operators

Ages: Known children under 13 (per COPPA); teens at least 13 but younger than 16

Requires: A controller must not process the sensitive data of a 'known child' except in accordance with COPPA, and 'child' is defined by reference to COPPA (under 13) (RSA 507-H:6, I(d); 507-H:1). For consumers the controller has actual knowledge (and willfully disregards) are at least 13 but younger than 16, the controller must obtain consent before processing their personal data for targeted advertising or selling it (RSA 507-H:6, I(g)). Controllers complying with COPPA's verifiable parental consent satisfy the chapter's parental-consent obligations (RSA 507-H:3).

Entry last reviewed 2026-10-01