New Hampshire Privacy Act (NHPPA)
A practical compliance guide for website owners. Learn what New Hampshire's privacy law requires and how to implement it on your site.
Who Must Comply
Conducts business in New Hampshire or targets New Hampshire residents AND controls/processes personal data of 35K+ consumers (excl. payment transactions), OR controls/processes data of 10K+ consumers and derives 25%+ revenue from selling personal data
What Your Website Must Do
| Requirement | Status |
|---|---|
| Cookie consent banner | Recommended |
| Do Not Sell link | Required |
| Do Not Share link | Required |
| Honor GPC browser signals | Recommended |
| Universal opt-out mechanism | Not required |
| Sensitive data opt-in consent | Required |
Required Links & Notices
The NHPPA requires the following links or notices to be visible on your website:
- 1Do Not Sell My Personal Data
- 2Privacy Policy
Enforcement & Penalties
Key Things to Know
New Hampshire's privacy law is one of the newest (effective January 2025), meaning search competition is extremely low. It follows the Virginia/Connecticut model with standard opt-out rights.
Low threshold: New Hampshire has some of the lowest thresholds among state privacy laws — 35,000 consumers for controllers or 10,000 consumers with 25%+ revenue from data sales.
How to Configure LegalBanner for NHPPA
- 1
Create your site
Sign up for free and add your website domain in the dashboard.
- 2
Set consent mode to "Opt-out"
In Settings, select the consent mode that matches New Hampshire's requirements.
- 3
Install the snippet
Add the one-line script tag to your website. The banner, opt-out links, and GPC support are automatic.
- 4
Generate your Privacy Policy
Use the built-in policy wizard to generate a NHPPA-compliant privacy policy.
Set up NHPPA compliance in 5 minutes
LegalBanner handles New Hampshire privacy requirements automatically — cookie banner, opt-out links, and GPC support included.
Frequently Asked Questions
When did the New Hampshire Privacy Act take effect?
The NHPPA took effect January 1, 2025. It is one of the newest state privacy laws in the US.
Does New Hampshire require a cookie consent banner?
The NHPPA does not require opt-in cookie consent. You must provide opt-out mechanisms for targeted advertising and sale of personal data.
What are the thresholds for the NHPPA?
The NHPPA applies if you process data of 35,000+ New Hampshire consumers (excluding payment transactions) or 10,000+ consumers while deriving 25%+ of revenue from data sales. These are among the lower thresholds nationally.
Does New Hampshire require honoring GPC signals?
The NHPPA does not currently require honoring GPC signals, but implementing GPC support is recommended as best practice.
What are the penalties for NHPPA violations?
Up to $10,000 per violation. The AG must provide a 60-day cure period before enforcement.