Privacy Map

Delaware. Comprehensive data protection. Act

DPDPADelaware Personal Data Privacy Act (6 Del. C. ch. 12D)

In force
Partly verifiedMedium confidence. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.

§1Summary

Synopsis

Virginia-style law with low thresholds that also covers most non-profits and treats status as transgender or non-binary as sensitive data.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
  • list of third-party categories
Unique features

Low thresholds (35,000 consumers, or 10,000 with 20%+ revenue from sales); non-profits included.

SaaS relevance

Even small SaaS businesses with Delaware users can be caught.

§2Obligations

Extraterritorial
Yes
Breach notification
See 6 Del. C. ch. 12B (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
Up to $10,000 per violation

§3Dates

Key dates
  • Adopted
  • In force
  • Cure period ended 2025-12-31.

§4Text and authority

Text
Authority
Delaware Department of Justice (Attorney General)

§5Where it applies

Domestic law of
Delaware

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.