This bill introduces a new chapter, Chapter 507-I, to the New Hampshire Revised Statutes, establishing an expectation of privacy for personal information maintained by government entities. It defines key terms such as "personal information," "government entity," and "third-party providers of information and services." The bill stipulates that individuals have a reasonable expectation of privacy regarding their personal information that is not publicly available and prohibits government entities from acquiring, collecting, retaining, or using such information from third-party providers unless specifically authorized by statute. Exceptions to this prohibition include situations involving law enforcement, emergencies, or when the individual has authorized access.

Additionally, the bill amends RSA 359-N:2, I(c) to include a reference to the new Chapter 507-I, thereby reinforcing the prohibition on obtaining or retaining biometric data unless specified in the new chapter. The bill also establishes penalties for violations, allowing individuals harmed by breaches of privacy to seek damages of at least $1,000 and recover attorney fees. The act is set to take effect on January 1, 2026, and its implementation may lead to indeterminable costs for state and local governments due to potential increases in civil cases and impacts on the judicial system.

Statutes affected:
Introduced: 359-N:2
As Amended by the House: 359-N:2
HB522 text: 359-N:2