NH HB1317

Prohibits state agencies, political subdivisions, contractors, vendors, and grant recipients from collecting, maintaining, or disclosing personally identifiable medical, disability, or mental health data to the federal government or third parties without specific authorization

Permits disclosure only when the individual provides informed written consent, when expressly required by law, regulation, or court order, or when necessary to provide or coordinate health care, services, or benefits

Requires that when disclosure is mandated, only the minimum data necessary shall be shared, and de-identified or anonymized data must be used whenever practicable

Preserves existing protections under federal laws including HIPAA, ADA, Section 504 of the Rehabilitation Act, GINA, and state laws including the NH Law Against Discrimination and Mental Health Bill of Rights

Grants the Attorney General enforcement authority with civil penalties and corrective action for violations, effective 60 days after passage