Privacy of Consumer Financial and Health Information (Insurance Department rules)
NH Ins 3000
Financial · Health
New Hampshire's insurance privacy rules, modeled on the NAIC privacy model regulation, require licensees to give privacy notices and let consumers opt out before nonpublic personal financial information is shared with nonaffiliated third parties. They also require the consumer's written or electronic authorization before a licensee discloses nonpublic personal health information, apart from listed insurance functions.
- Where
- New Hampshire
- Citation
- N.H. Code Admin. R. Ins 3001-3007
- Status
- In force
- In force since
- 2001-07-01
- Last amended
- 2019-05-06
- Enforced by
- New Hampshire Insurance Commissioner
- People can sue
- No
- Penalties
- Violations are subject to RSA 400-A:15, III (license suspension or revocation, or administrative fines up to $2,500 per knowing violation) and RSA 417:13.
- Applies to
- Insurance licensees (insurers, producers and others licensed by the NH Insurance Department) handling nonpublic personal financial and health information about consumers and customers
What a privacy notice must say
- Provide customers a clear and conspicuous privacy notice reflecting privacy policies and practices at least annually during the customer relationship.Ins 3002.02
- Privacy notices must include the content specified in the rules, and opt-out notices must describe reasonable opt-out methods.Ins 3002.03; Ins 3002.04
Rights it gives people
- Do not disclose nonpublic personal financial information to nonaffiliated third parties unless the consumer received initial and opt-out notices and a reasonable opportunity to opt out and did not do so, subject to service-provider, joint-marketing and transaction exceptions.Ins 3003.01; Ins 3004
Practices it requires
- Do not disclose nonpublic personal health information without a valid authorization from the consumer or customer, except for listed insurance functions.Ins 3005.01
- Authorizations must be written or electronic and identify the consumer, the types of health information, the recipients and purposes, and be signed and dated.Ins 3005.02
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: The rules page fetched is a 2019 document; readoption status beyond 2019 (NH rules generally expire after 10 years, around 2029) was not checked against the current Office of Legislative Services rules checklist
Research reference, not legal advice.