NH · Breach notification statute
New Hampshire data breach notification law
Summary
- Statute citation
N.H. Rev. Stat. Ann. §§ 359-C:19 to 359-C:21 (New Hampshire Right to Privacy Act (Notice of Security Breach Subdivision)) (amended 2006)
- Last amended
- 2006 (as stated in the citation)
- Source
- PRC Data Breach Notification Laws Survey 2026
Who must notify and when
Not extracted in our PRC 2026 summary; check the statute.
Attorney general notice
Yes New Hampshire requires notification to the primary regulatory authority or Attorney General's office
What counts as a breach
In New Hampshire 'security breach' means unauthorized acquisition of computerized data that compromises the security or confidentiality of personal information maintained by a person doing business in this state. Good faith acquisition of personal information by an employee or agent of a person for the purposes of the person's business shall not be considered a security breach, provided that the personal information is not used or subject to further unauthorized disclosure. 1
What counts as personal information
In New Hampshire 'personal information' means an individual's first name or initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (1) Social security number; (2) Driver's license number or other government identification number; (3) Account number, credit card number, or debit card number, in combination with any required security code, access code, or password that would permit access to an individu
Coverage and remedies
"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.
HIPAA breaches reported in New Hampshire
41 reports to HHS OCR affecting 1,163,058 individuals. Most common type: Hacking/IT Incident. See all HIPAA breaches in New Hampshire.
Five largest
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Seacoast Radiology, PA | Healthcare Provider | 231,400 | Jan 10, 2011 | Hacking/IT Incident | Archive (closed) |
| Neuro Rehab Associates, Inc. d/b/a Northeast Rehabilitation Hospital Network | Healthcare Provider | 190,220 | Nov 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Neuro Rehab Associates, Inc. d/b/a Northeast Rehabilitation Hospital Network | Healthcare Provider | 136,724 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| NuLife Med, LLC | Healthcare Provider | 92,436 | May 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Access Sports Medicine & Orthopaedics | Healthcare Provider | 88,044 | Jun 20, 2024 | Hacking/IT Incident | Archive (closed) |
Frequently asked questions
Does New Hampshire require notice to the attorney general?
The PRC 2026 extract notes: "Yes New Hampshire requires notification to the primary regulatory authority or Attorney General's office". (Source: PRC 2026 survey extract.)
Does the New Hampshire law cover biometric data?
No. The PRC 2026 survey does not record biometric data as covered by the New Hampshire breach law.
Does the New Hampshire law cover medical information?
No. The PRC 2026 survey does not record medical information as covered by the New Hampshire breach law.
Does the New Hampshire law cover paper records?
No. The PRC 2026 survey records the New Hampshire law as covering computerised data only, not paper records.
Is there a private right of action in New Hampshire?
Yes. The PRC 2026 survey records a private right of action under the New Hampshire breach law.
Is credit monitoring required in New Hampshire?
No. The PRC 2026 survey does not record a credit monitoring requirement in New Hampshire.
How does the New Hampshire law relate to HIPAA?
HIPAA covered entities and business associates follow the federal HIPAA Breach Notification Rule for protected health information. State breach laws can apply alongside it, and some state statutes treat HIPAA compliance as satisfying state duties. Check the New Hampshire statute, and see our HIPAA vs state breach notification laws guide.
Sources
- Privacy Rights Clearinghouse, Data Breach Notification Laws Survey 2026 (laws as of 1 January 2026): privacyrights.org
- The New Hampshire state legislature website for the current text of the statute.
- HHS OCR Breach Portal: ocrportal.hhs.gov
- Further reading: NCSL security breach notification laws