New Hampshire Joins Bipartisan Consortium of Privacy Regulators to Collaborate on Data Privacy Enforcement

Concord, NH - Attorney General John M. Formella announces today that New Hampshire has joined the Consortium of Privacy Regulators, a national, bipartisan organization of state regulators that collaborates on the implementation and enforcement of state privacy laws. The Consortium's shared goal is to strengthen consumer protections nationwide while ensuring businesses comply with state privacy requirements.

"Each year, businesses collect and process vast amounts of data on New Hampshire residents," said Attorney General Formella. "This data can be important for innovation and for offering goods and services, but it can also cause harm when it is used contrary to law. By joining this bipartisan group, New Hampshire will strengthen its enforcement efforts and promote better compliance with our privacy law."

New Hampshire's participation follows the passage of the New Hampshire Data Privacy Act, RSA 507-H, in 2024 and the creation of a dedicated Data Privacy Unit within the Department of Justice in 2025. The Unit, now fully staffed, has already:
• Published consumer and business guidance, including a detailed FAQ resource.
• Engaged with chambers of commerce, trade groups, and other organizations to help businesses understand their obligations and consumers understand their rights.
• Received and responded to consumer complaints, most commonly requests to delete personal data under RSA 507-H.
• Conducted proactive compliance reviews of company privacy practices.
• Issued several Notices of Violation during the law's initial "cure period," leading to corrective actions by businesses without the need for litigation.
• Opened multiple privacy investigations, several of which remain ongoing.

The Consortium allows state regulators and attorneys general offices from member U.S. states who have similar privacy laws to share expertise and coordinate enforcement actions where laws overlap, while each state maintains independent authority over its own cases and its own consumer data. New Hampshire will retain full control over its consumer data and will not be required to share private information with other states.

The NH DOJ Data Privacy Unit enforces violations of New Hampshire's privacy laws. Anyone wishing to report a violation of RSA 507-H is encouraged to fill out a Consumer Protection Complaint Form at https://www.doj.nh.gov/citizens/consumer-protection-antitrust-bureau/consumer-complaints or contact the Consumer Protection and Antitrust Bureau by email at [email protected].

For more information about New Hampshire's comprehensive data privacy law, please visit https://www.doj.nh.gov/data-privacy-enforcement.