Delaware Privacy Law (DPDPA)

Delaware Personal Data Privacy Act (HB 154)
Delaware · 6 Del. C. § 12D-101 et seq. (2023 DE HB 154)

Status
In effect
Took effect
January 1, 2025
Applies to
Controllers/processors meeting thresholds doing business in Delaware
Enforced by
Delaware Department of Justice / Attorney General

Delaware residents can access, correct, delete, and port their personal data, and opt out of targeted advertising, data sales, and profiling used in solely automated decisions with legal effects. Applies at low thresholds (35,000 consumers).

Who is protected: Delaware consumers

Legal detail

6 Del. C. § 12D-101 et seq. (HB 154, eff. Jan. 1, 2025); 35,000/10,000-20%-revenue thresholds; profiling opt-out; data protection assessments; AG-only enforcement.

Key facts

JurisdictionDelaware
LevelState
StrengthLimited
EnactedSeptember 11, 2023
Citation6 Del. C. § 12D-101 et seq. (2023 DE HB 154)
Private right of actionNo, agency enforcement only
PenaltiesCivil penalties via AG; no private right of action
Topicsconsumer data privacy · automated decision-making · consumer protection · data retention
Bill textDelaware Personal Data Privacy Act — Delaware General Assembly

More AI rules in Delaware

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.