NH HB1650

Establishes an Age-Appropriate Design Code requiring online businesses to configure default privacy settings to the highest level for minors under 18, including hiding accounts from adult users, disabling direct messaging with adults, and blocking push notifications

Prohibits covered businesses from collecting, selling, or retaining personal data of minors beyond what is necessary for the service they are actively using, and bans using personal data to algorithmically recommend content unless the minor explicitly requests specific content types

Requires businesses to provide transparency about algorithmic recommendation systems, including disclosing inputs used, how personal data is collected and shared, and data retention periods

Mandates that age assurance data collected to verify if a user is a minor must be immediately deleted after determination, cannot be used for other purposes, and users must have an appeal process for age designations

Authorizes the Attorney General to adopt rules by January 1, 2027 to enforce the provisions, with violations treated as unfair or deceptive trade practices under RSA 358-A:2