This bill establishes new restrictions on the collection and disclosure of autism-related data by state agencies in New Hampshire. It mandates that agencies must not collect or utilize data scraping technology to gather such data unless it complies with the Health Insurance Portability and Accountability Act (HIPAA) and is strictly necessary for specific purposes, including the administration of benefits programs, provision of medical care, and compliance with legal requirements. Additionally, contractors and vendors acting on behalf of these agencies are required to adhere to the same privacy and data protection standards.

The bill also outlines strict limitations on the disclosure of personally identifiable autism-related data, allowing such disclosures only under certain conditions, such as with informed consent from the individual or legal guardian, or as required by law. It emphasizes that all disclosures must be minimized to the least amount of information necessary and should be anonymized when possible. Furthermore, the bill preserves existing civil rights protections under various federal and state laws, ensuring that the rights of individuals with disabilities are not compromised. The act is set to take effect 60 days after its passage.