This bill establishes a new chapter in the New Hampshire Revised Statutes, specifically Chapter 507-I, which outlines the expectation of privacy for personal information maintained by government entities. It defines key terms such as "personal information," "government entity," and "third-party providers of information and services." The bill asserts that individuals have a reasonable expectation of privacy regarding their personal information that is not publicly available and prohibits government entities from acquiring, collecting, retaining, or using such information from third-party providers without specific statutory authorization. Exceptions to this prohibition include situations involving law enforcement, emergencies, or when individuals have authorized access to their information.

Additionally, the bill amends RSA 359-N:2, I(c) to include a reference to the new Chapter 507-I, thereby reinforcing the regulation of biometric information. It establishes penalties for violations, including misdemeanor charges for individuals who knowingly breach the provisions and allows aggrieved individuals to seek damages of at least $1,000 from the responsible government entity. The act is set to take effect on January 1, 2026, and its fiscal impact is currently indeterminable, as it may affect judicial and correctional systems due to potential increases in civil cases related to privacy violations.

Statutes affected:
Introduced: 359-N:2
As Amended by the House: 359-N:2
HB522 text: 359-N:2