New Hampshire residents enjoy some of the strongest data privacy protections in the country thanks to the New Hampshire Privacy Act (NHPA), which took effect on January 1, 2025. If you live in the Granite State, you have clear legal rights to opt out of data collection, stop the sale of your personal information, and require data brokers to delete your records. Here is how to exercise those rights and take back control of your personal data.
Your Rights Under the New Hampshire Privacy Act
The NHPA (RSA 507-H), signed into law by Governor Chris Sununu in March 2024, made New Hampshire the 14th state to enact a comprehensive consumer data privacy law. It applies to businesses that conduct business in New Hampshire or target products and services to New Hampshire residents and meet one of these thresholds:
- Control or process the personal data of 35,000 or more unique New Hampshire consumers during a calendar year
- Control or process the personal data of 10,000 or more unique New Hampshire consumers and derive more than 25% of gross revenue from the sale of personal data
Under the NHPA, you have the right to:
- Confirm and access whether a business is processing your personal data and obtain a copy of it
- Correct inaccuracies in your personal data
- Delete personal data that a business has collected from or about you
- Data portability — receive your data in a portable, readily usable format
- Opt out of the sale of your personal data
- Opt out of targeted advertising based on your data
- Opt out of profiling that produces legal or similarly significant effects
2026 Update: Cure Period Has Expired
As of January 1, 2026, the mandatory 60-day cure period for businesses that violate the NHPA has expired. The New Hampshire Attorney General now has full discretion over whether to offer a cure opportunity, considering factors such as the number of violations, the likelihood of public injury, and the size and complexity of the business. This means stronger enforcement is now possible for companies that ignore your opt-out requests.
Step 1: Enable Universal Opt-Out Signals
The NHPA requires businesses to honor universal opt-out preference signals. The easiest first step is to install a browser or extension that supports Global Privacy Control (GPC), which sends an automatic opt-out signal to every website you visit.
- Firefox: Has built-in GPC support. Navigate to Settings, then Privacy & Security, and enable "Tell websites not to sell or share my data"
- Brave: GPC is enabled by default
- DuckDuckGo: Both the browser and extension support GPC
- Chrome: Install the Privacy Badger or OptMeowt extension to add GPC functionality
This covers websites you visit going forward, but it will not remove personal data that brokers have already collected about you. For that, you need to take additional steps.
Step 2: Identify Which Data Brokers Have Your Information
Data brokers collect and sell personal information about millions of New Hampshire residents — names, home addresses, phone numbers, email addresses, property records, and more. New Hampshire's public records, including property tax data from town and city assessors, voter registration files, and court records, are frequently scraped by these companies.
Common data brokers that list New Hampshire residents include:
- People-search sites: Spokeo, BeenVerified, WhitePages, TruePeopleSearch, FastPeopleSearch, Radaris
- Marketing data brokers: Acxiom, Epsilon, Oracle Data Cloud, LexisNexis
- Background check companies: Instant Checkmate, TruthFinder, CheckPeople, Intelius
- Real estate data brokers: PropertyShark, CoreLogic, Rehold
Search for yourself on these sites using your name, city, and phone number. Make a list of every site where your information appears — this becomes your removal checklist.
Step 3: Submit Opt-Out and Deletion Requests
Each data broker has its own opt-out process, but the NHPA gives you legal backing to demand removal. Here is the general approach:
- Find the opt-out page: Look for "Privacy Policy," "Do Not Sell My Information," or "Opt Out" links in the website footer
- Search for your listing: Locate your specific profile on the broker's site and note the URL
- Verify your identity: Most brokers will ask you to confirm your identity via email verification or by providing specific personal details
- Submit your request: Complete the opt-out form, explicitly requesting both opt-out from sale and deletion of your data. Reference your rights under the NHPA
- Document everything: Save confirmation emails, screenshots, and note the date of each submission
- Follow up: New Hampshire law requires businesses to respond to authenticated consumer requests within 45 days, with a possible 45-day extension when reasonably necessary
Data Brokers Frequently Re-List Your Information
A single opt-out request is rarely permanent. Data brokers continuously scrape public records, social media, and other sources to rebuild profiles. New Hampshire town clerk records, voter rolls, and property assessor databases are all fair game. You will need to monitor these sites and resubmit opt-out requests every few months to keep your information removed.
Step 4: Use an Authorized Agent
The NHPA allows you to designate an authorized agent to submit opt-out requests on your behalf. This is particularly useful if you want to use a privacy service to handle the process for you. You can authorize an agent to exercise your right to opt out of data sales, targeted advertising, and certain profiling activities without having to contact each broker yourself.
Step 5: File Complaints With the Attorney General
If a data broker ignores your opt-out request or fails to respond within the 45-day window, you can file a complaint with the New Hampshire Department of Justice. The Attorney General has exclusive enforcement authority over the NHPA, and violations can result in civil penalties of up to $10,000 per violation.
Visit the New Hampshire Department of Justice website at doj.nh.gov to submit a complaint. Include copies of your opt-out request, any responses from the broker, and a timeline of events.
Note that the NHPA does not include a private right of action, meaning you cannot sue a company directly for violations. Your recourse is through the Attorney General's office.
New Hampshire-Specific Tips
Here are additional steps New Hampshire residents should take to limit data exposure:
- Town meeting and tax records: New Hampshire towns publish property tax assessments and meeting minutes online. While you generally cannot remove yourself from these public records, be aware that they are a primary source for data brokers
- Voter registration: New Hampshire voter records, including your name and address, are publicly available through the Secretary of State's office. You cannot fully opt out, but you can request that access for commercial purposes be restricted
- Court records: New Hampshire Judicial Branch records are partially available online. Contact the court clerk's office to request removal of sensitive personal information
- Motor vehicle records: New Hampshire restricts the sale of DMV records under the federal Driver's Privacy Protection Act, but some information may still be accessible
Automate the Process With PrivacyOn
Manually opting out of dozens of data brokers is a time-consuming process that needs to be repeated regularly. PrivacyOn automates the entire process for New Hampshire residents, submitting opt-out and deletion requests to more than 100 data broker sites on your behalf.
With PrivacyOn, you get:
- Automated opt-out requests submitted on your behalf to all major data brokers
- Continuous monitoring for new listings of your personal information
- Dark web monitoring to alert you if your data appears in breach databases
- Family plans covering up to 5 people to protect your entire household
- Regular reports showing which brokers had your data and the status of each removal
For New Hampshire residents who want to take full advantage of their NHPA rights without spending hours on manual submissions, PrivacyOn handles the heavy lifting so you do not have to.
The Bottom Line
The New Hampshire Privacy Act gives Granite State residents genuine power to control their personal information. With the mandatory cure period now expired in 2026, enforcement is stronger than ever, and data brokers face real consequences for ignoring your requests. Whether you tackle the opt-out process manually or use a service like PrivacyOn to automate it, the important thing is to take action. Your personal data has value, and you have the legal right to decide who gets access to it.