To obtain consent under the NHDPL, clearly explain in simple language what personal data you collect, why you need it, and how it will be used. Then, ask individuals to actively agree - like by checking a box or clicking a button - so they know exactly what they’re signing up for and can easily change their mind later if needed.

New Hampshire enforces the NHDPL through the New Hampshire Attorney General's Office. This office monitors how companies handle personal data by conducting audits and investigating consumer complaints. If a business is found to be non-compliant, the Attorney General's Office can impose fines or mandate immediate changes to their data practices, ensuring that companies take data protection seriously and uphold consumers' privacy rights.

To get your business compliant with the NHDPL, start by taking stock of the personal data you collect, process, and store. Update your privacy policies so they clearly explain what data you gather, why you need it, and how you use it in language that’s easy to understand. Make sure you have proper consent from individuals, such as an opt-in system where people actively agree to your terms. Strengthen your data security measures to protect against breaches, and set up simple procedures for handling data access, corrections, and deletion requests. Regular employee training and periodic reviews of your practices are also key, and consulting with a legal or data privacy expert can help ensure you’re fully meeting the law’s requirements.
‍
Shopify merchants can simplify compliance by using tools like Consentmo, which automates tasks such as managing cookie consent, creating privacy notices, and handling data subject requests.