1. I. Relying parties shall authenticate electronic credentials in accordance with applicable division standards prior to acceptance of the electronic credential.
2. II. Electronic credential data is subject to data security and privacy protection according to RSA 507-H, as well as any other applicable state and federal law.
3. III. Relying parties shall only request electronic credential data elements that are necessary to complete the transaction for which that data is being requested.

Source. 2025, 141:386, eff. Jan. 1, 2026.