Delaware Personal Data Privacy Act (“DPDPA”) (6 Del. C. §§ 12D-101, et seq.) (Effective January 1, 2025)

Delaware Personal Data Privacy Act (“DPDPA”)

OFFICIAL CITATION: 6 Del. C. §§ 12D-101, et seq., Title 6, Chapter 12D – Delaware Personal Data Privacy Act.
ORIGINAL LEGISLATION: House Bill 154 (2023); 84 Del. Laws, Chapter 197.
EFFECTIVE DATE: January 1, 2025.
STATUS: Enacted and operative; amended by House Bill 380 (2026), 85 Del. Laws, Chapter 463, with amendments effective January 1, 2027.

 

SUMMARY:
The Delaware Personal Data Privacy Act (“DPDPA”) establishes consumer privacy rights and compliance requirements for covered organizations that collect, use, process, or disclose personal data of Delaware residents.
The law addresses consumer rights, privacy notices, sensitive data, data protection assessments, targeted advertising, personal-data sales, processor relationships, security safeguards, and enforcement by the Delaware Department of Justice.
Amendments enacted in September 2026 expand the law’s applicability, strengthen sensitive-data protections, introduce additional rights involving automated decision-making, and establish further requirements involving third parties that receive personal data. These amendments take effect January 1, 2027.
Organizations should review the current statutory provisions and upcoming amendments when evaluating their Delaware privacy obligations and preparing for the expanded requirements.

 

OFFICIAL LEGAL SOURCES:
Last Reviewed: October 16, 2026

 

These materials were obtained directly from the State Government public websites and are posted here for your review and reference only.  No Claim to Original State Government Works.  This may not be the most recent version.  The State may have more current information.  We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to.  Please check the linked sources directly.