Skip to content

Cyber Liability by state

New Hampshire data breach notification law and cyber insurance

Direct answer

What is New Hampshire's data breach notification law?

New Hampshire's breach notification law (N.H. Rev. Stat. sect. 359-C:19 et seq.) requires businesses to notify affected residents as quickly as possible after determining that notification is required after a breach of personal information. New Hampshire requires businesses to notify affected residents and the Attorney General of breaches of unencrypted personal information without unreasonable delay, once misuse becomes reasonably likely.

Reviewed by Cornerstone Staff28 years of financial services state licensing experienceLast verified July 29, 2026

What the statute requires

New Hampshire requires businesses to notify affected residents and the Attorney General of breaches of unencrypted personal information without unreasonable delay, once misuse becomes reasonably likely. Cyber liability insurance generally funds the forensics, notification, and legal review behind that analysis.

Consumer notification deadline
As quickly as possible after determining that notification is required
Regulator notice
Notify the New Hampshire Attorney General when residents are notified of a breach.
Credit bureau notice
Notify consumer reporting agencies when a breach requires notice to more than 1,000 residents.
Safe harbor
Notification is not required if an investigation determines that misuse of the information has not occurred and is not reasonably likely to occur.
Enforcement
Violations are enforceable under the state's consumer protection act, and affected residents may bring a civil action.

Statutes and sources

  • New Hampshire Notification of Security Breach Law

    N.H. Rev. Stat. sect. 359-C:19 et seq.

Regulator: New Hampshire Department of Justice . Last verified 2026-07-29 from the official source .

Get New Hampshire coverage handled

Share a few details and an agent will respond within one business day.