This bill establishes new regulations for data brokers operating within the state, requiring them to register with the Secretary of State and creating an online registry accessible to the public. It amends RSA 507-H:4 to expand consumer rights, allowing individuals to opt-out of the processing of their personal data for any purpose, not just targeted advertising and sales. Additionally, data brokers must notify consumers within 15 days after fulfilling requests for data deletion or opting out. The bill also defines key terms such as "data broker," "digital service," and "personal identifying information," and outlines the registration process, which includes submitting a statement with the broker's legal name, contact details, data processing categories, and any security breaches from the previous year.

Furthermore, the bill mandates that data brokers implement comprehensive information security programs to protect personal data and requires annual registration with a $300 fee. It introduces civil penalties for violations, starting at $100 per day and potentially reaching up to $10,000 within a year, classifying violations as deceptive trade practices. The Secretary of State will adopt necessary rules for implementation, and the bill is expected to incur significant costs for the state, estimated between $1 million to $2.5 million, with an effective date set for January 1, 2027.

Statutes affected:
Introduced: 507-H:4
HB1694 text: 507-H:4