HomeLegal DirectoryDelaware Privacy Law (DPDPA)

In effect Limited protection

Delaware Personal Data Privacy Act (HB 154)

Delaware · 6 Del. C. § 12D-101 et seq. (2023 DE HB 154)

Delaware residents can access, correct, delete, and port their personal data, and opt out of targeted advertising, data sales, and profiling used in solely automated decisions with legal effects. Applies at low thresholds (35,000 consumers).

Technical detail

6 Del. C. § 12D-101 et seq. (HB 154, eff. Jan. 1, 2025); 35,000/10,000-20%-revenue thresholds; profiling opt-out; data protection assessments; AG-only enforcement.

Who is protected: Delaware consumers

Who must comply: Controllers/processors meeting thresholds doing business in Delaware

Key facts

JurisdictionDelaware
LevelState
StatusIn effect
Protection strengthLimited protection
Effective date2025-01-01
Enacted2023-09-11
Citation6 Del. C. § 12D-101 et seq. (2023 DE HB 154)
Enforced byDelaware Department of Justice / Attorney General
Private right of actionNo — agency enforcement only
PenaltiesCivil penalties via AG; no private right of action
Topicsconsumer data privacy · automated decision-making · consumer protection · data retention
Last verified2026-06-12
Official sourceDelaware Personal Data Privacy Act — Delaware General Assembly ↗

More AI rules in Delaware

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.