New Hampshire Privacy Act (NHPA) Awareness Course
New Hampshire stands out among US state privacy laws by requiring universal opt-out mechanism compliance from day one - no phase-in period. While other states delayed this requirement, businesses operating in New Hampshire must honour Global Privacy Control and similar signals immediately when the law takes effect.
This course provides practical guidance on the New Hampshire Privacy Act. We cover who must comply, the rights New Hampshire residents have over their data, the critical universal opt-out requirement, sensitive data handling, and enforcement by the dedicated Data Privacy Unit.
The NHPA became effective on January 1, 2025. New Hampshire has created a dedicated Data Privacy Unit within the Attorney General's office for enforcement, signalling a serious approach to compliance. Penalties can reach $10,000 per violation. No technical background required - just focused, practical training your team can apply immediately.
Why learn about the NHPA?
- Understand the immediate universal opt-out mechanism requirement
- Know how to implement Global Privacy Control compliance
- Handle New Hampshire consumer data requests correctly
- Avoid penalties of up to $10,000 per violation
- Prepare for enforcement by the dedicated Data Privacy Unit
Course features
New Hampshire-specific
Focused entirely on the NHPA with New Hampshire-specific requirements, including the immediate universal opt-out requirement.
Practical scenarios
Real-world examples showing how to implement universal opt-out mechanisms and handle consumer requests.
Current guidance
Covers the law as effective January 2025 with the latest Data Privacy Unit guidance and compliance requirements.
Official sources
Built from the New Hampshire Revised Statutes and Attorney General guidance, with references to official documentation.
Learning with us
Course information
Learning outcomes
- Understand when and how the NHPA applies to your organisation
- Implement universal opt-out mechanism compliance correctly
- Recognise the rights New Hampshire residents have over their personal data
- Handle consumer data requests correctly within required timeframes
- Understand enforcement by the Data Privacy Unit and potential penalties
Training recommendations
- All employees who handle customer data should complete this training.
- Annual refresher training is recommended to stay current with amendments and enforcement trends.
- IT teams responsible for website technology should receive additional training on universal opt-out implementation.
This course is recommended for
Employees who handle customer data at organisations that conduct business in New Hampshire or target New Hampshire residents. This includes marketing, sales, customer service, HR, IT, and compliance teams, with particular relevance for web development and marketing technology teams.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).
Course content
In this section we introduce the New Hampshire Privacy Act and explain why it matters for your organisation. We cover what makes New Hampshire's law unique, including the universal opt-out requirement from day one.
Lessons
- Introduction to the NHPA
- Why New Hampshire matters: universal opt-out from day one
- Effective date: January 1, 2025
- The dedicated Data Privacy Unit
- Key definitions you need to know
New Hampshire follows the Virginia model for applicability thresholds. This section covers who the law applies to and which entities are exempt.
Lessons
- The 35,000 consumer threshold
- The 10,000 consumer + revenue threshold
- Small business considerations
- Entities exempt from the NHPA
- Relationship with other state laws
New Hampshire residents have comprehensive rights over their personal data. We cover what those rights are, how to handle requests, and the timeframes you must meet.
Lessons
- The right to know and access
- The right to correct inaccuracies
- The right to delete personal data
- The right to data portability
- The right to opt out of sales, profiling, and targeted advertising
- Handling consumer requests within 45 days
New Hampshire requires businesses to honour universal opt-out mechanisms from day one - no phase-in period. We explain what this means and how to implement it correctly.
Lessons
- What is a universal opt-out mechanism?
- Global Privacy Control (GPC)
- Day one compliance requirement
- Technical implementation considerations
- Common implementation mistakes
The NHPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data in New Hampshire and how to implement proper consent mechanisms.
Lessons
- What is sensitive data under NHPA?
- The opt-in consent requirement
- Children's data and parental consent
- Biometric and precise geolocation data
- Practical consent workflows
Understand how the NHPA is enforced by the dedicated Data Privacy Unit, the cure period, and what penalties look like.
Lessons
- The Data Privacy Unit
- Attorney General enforcement authority
- The 60-day cure period
- Penalties up to $10,000 per violation
- No private right of action
- Responding to investigations
Test your knowledge with scenario-based questions covering all the key NHPA concepts from the course.
Lessons
- Knowledge check (10 questions)
How it works
Get notified
Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the NHPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and amendments.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.
This course is designed for employees who handle customer data at organisations that may be subject to New Hampshire's privacy law. This includes marketing, sales, customer service, HR, and IT teams at organisations doing business in New Hampshire or handling data of New Hampshire residents.
New Hampshire's most significant difference is requiring universal opt-out mechanism compliance from day one - most other states have delayed this requirement. New Hampshire has also created a dedicated Data Privacy Unit for enforcement. It uses similar thresholds to Virginia but has higher penalties ($10,000 per violation).
NHPA applies to organisations that conduct business in New Hampshire or target New Hampshire residents, AND either: (a) control or process personal data of 35,000+ New Hampshire consumers, or (b) control or process data of 10,000+ New Hampshire consumers and derive more than 25% of gross revenue from selling personal data.
A universal opt-out mechanism is a browser setting or signal (like Global Privacy Control) that communicates a consumer's opt-out preference to all websites they visit. New Hampshire requires businesses to honour these signals from day one, meaning you need technical implementation ready at launch.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.
Get notified when this course launches
Sign up to our newsletter to be the first to know when this course is available.
This course will be included in Measured Collective Plus
Get access to all our courses with one subscription from £236/year.
Learn About MC PlusAvailable courses
PECR & ePrivacy for Marketers
Included in PLUS
Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.
View Course
GDPR Refresher Training Course
Included in PLUS
A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…
View Course
GDPR Essentials Course
Included in PLUS
Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.
View Course