This bill aims to enhance patient privacy protections in New Hampshire by prohibiting state agencies, political subdivisions, contractors, vendors, and grant recipients from collecting, maintaining, or disclosing personally identifiable medical, disability, or mental health data to the federal government or any third party, except under specific conditions. The new legal language inserted into the law states that such disclosures are only permissible if the individual or their representative provides informed written consent, if disclosure is required by law, or if it is necessary for healthcare coordination. Additionally, when disclosures are made, they must adhere to the principle of sharing only the minimum necessary data, and de-identified or anonymized data should be used whenever possible.

The bill also emphasizes that it does not diminish existing protections under federal or state laws, including HIPAA, the Americans with Disabilities Act, and other relevant statutes. The Attorney General is granted the authority to enforce these provisions, with violations potentially subject to civil penalties and corrective actions. The act is set to take effect 60 days after its passage, reinforcing the state's commitment to safeguarding the privacy of individuals with medical conditions, disabilities, or mental health needs.