HB1694-FN: relative to the regulation of and protections for personal data obtained by websites and data brokers.

Related law links

RSA references from bill data

• 358-A · reference · effective 2027-01-01

  urt costs incurred in bringing the action. 507-H:19 Deceptive Trade Practice. A violation of this subdivision by a data broker shall constitute a deceptive trade practice under RSA 358-A and shall be actionable under that chapter. 507-H:20 Rules. The secretary of state shall adopt rules as necessary to implement this subdivision. 4 Effective Date. This act shall take effect January 1, 2027.

• 507-H · amend · effective 2027-01-01

  such personal data has been deleted and/or that the consumer has been opted out of any future collection or processing. 3 New Subdivision; Registration of Data Brokers. Amend RSA 507-H by inserting after section 12 the following new subdivision: Registration of Data Brokers 507-H:13 Definitions. In this subdivision: I. "Data broker" means a controller or processor that knowingly collects, agg

• 507-H:10 · reference · effective 2027-01-01

  follows: (e) Opt-out of the processing of the personal data for [purposes of targeted advertising, the sale of personal data] any purpose, except as provided in RSA 507-H:6 and RSA 507-H:10, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. 2 New Subparagraph; Actions, Process, and Service of Process; Expectation of Pr

• 507-H:14 · reference · effective 2027-01-01

  shall include: (a) A search feature that allows a person searching the registry to identify a specific data broker; and (b) For each data broker, the information filed under RSA 507-H:14. 507-H:16 Protection of Personal Data. I. A data broker conducting business in this state shall have a duty to protect personal data held by that data broker as provided by this section. II. A data broker shall d

• 507-H:4 · amend · effective 2027-01-01

  the Senate and House of Representatives in General Court convened: 1 Actions, Process, and Service of Process; Expectation of Privacy; Consumer Expectation of Privacy. Amend RSA 507-H:4, I(e) to read as follows: (e) Opt-out of the processing of the personal data for [purposes of targeted advertising, the sale of personal data] any purpose, except as provided in RSA 507-H:6 and RSA 507-H:10, or profi

• 507-H:6 · reference · effective 2027-01-01

  I(e) to read as follows: (e) Opt-out of the processing of the personal data for [purposes of targeted advertising, the sale of personal data] any purpose, except as provided in RSA 507-H:6 and RSA 507-H:10, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. 2 New Subparagraph; Actions, Process, and Service of Process;

RSAs mentioned by this document

• RSA 358-A · REGULATION OF BUSINESS PRACTICES FOR CONSUMER PROTECTION
• RSA 507-H · EXPECTATION OF PRIVACY
• RSA 507-H:10 · Controller Responsibilities and Obligations
• RSA 507-H:4 · Consumer Expectation of Privacy
• RSA 507-H:6 · Controller Responsibilities