New Hampshire Amends the NHDPA to Prohibit the Sale of Children’s Personal Data
On June 19, 2026, a significant step was taken in New Hampshire concerning child privacy rights when Governor Kelly Ayotte signed HB 1460 into law. This legislative amendment modifies the New Hampshire Data Privacy Act (NHDPA) to explicitly prohibit the sale of children’s personal data. With this amendment, New Hampshire joins the growing movement across the United States to better protect the privacy of minors in an age where data is often treated as a commodity.
Understanding the Scope of the NHDPA
To fully appreciate the implications of this amendment, it’s essential to understand the baseline established by the NHDPA. The Act defines a “child” in alignment with the Children’s Online Privacy Protection Act (COPPA), specifying that a child is an individual under the age of 13. Before the enactment of HB 1460, the NHDPA required data controllers to obtain explicit, opt-in consent from consumers before processing any sensitive data, including personal data that could identify a known child.
Furthermore, any processing of sensitive data concerning a known child had to be in strict adherence to COPPA guidelines. This alignment not only reinforced data protection for minors but also stipulated that compliance with COPPA would satisfy any parental consent obligations under the NHDPA.
The New Amendment: A Deeper Layer of Protection
The most noteworthy change brought about by HB 1460 is the categorical prohibition on the sale of children’s personal data, irrespective of consent. This advancement is crucial because it recognizes that, regardless of a parent’s consent or the transparency of data processing activities, the very act of selling a child’s data is inherently risky and potentially exploitative.
The NHDPA now defines the "sale of personal data" specifically as the exchange of personal data for monetary or other valuable considerations by a data controller to a third party. This definition offers a clearer framework for enforcement and accountability, indicating that not just a lack of consent is an issue but the aggregate practices surrounding children’s data in general.
The Implications for Data Controllers
With the amendment taking effect on January 1, 2027, data controllers must swiftly adapt their business practices. Compliance will require a thorough evaluation of existing data management strategies, particularly those involving children’s data. Organizations that have previously relied on comprehensive consent mechanisms must now rethink their data interactions. There will no longer be a gray area regarding the sale of children’s data; it will be strictly off-limits.
This change not only heightens the stakes for companies that process child data but also underscores a larger trend in recognizing the vulnerabilities of young consumers in the digital marketplace.
A Broader Context: The Shift Towards Child Privacy
New Hampshire’s amendment is part of a broader pattern in which states are increasingly prioritizing children’s privacy rights. Various other states have enacted or proposed similar measures, prompted by concerns over how easily children’s data can be collected and monetized online. The implementation of HB 1460 reflects an urgent need to create safer digital environments for minors, moving away from profit-driven models that can put children at risk.
What This Means for Parents and Advocacy Groups
For parents, this legislative change offers peace of mind regarding their children’s online activities. With a reinforced framework aimed at protecting young consumers, families can feel more secure knowing that their children’s personal data cannot be commoditized without stringent restrictions.
Advocacy groups focused on child welfare have lauded this amendment, viewing it as an essential victory in the fight for greater accountability and ethical data practices. Such legislation not only champions children’s rights but also sets precedents for other states considering similar laws.
The Path Ahead
As the effective date approaches, stakeholders will be watching closely to assess how companies adapt to this transformative amendment. Will this lead to more stringent compliance measures, or perhaps motivate further legislative changes in other regions?
Ultimately, New Hampshire’s decision to tighten the reins on children’s data is an encouraging sign that the issues surrounding digital privacy are being met with proactive solutions, reflecting a deeper societal commitment to protect those who are most vulnerable in the digital landscape. As advancements in data protection continue to evolve, the dialog surrounding children’s privacy rights is more important than ever.