Delaware’s Consumer Privacy Law

Delaware’s Personal Data Privacy Act governs how covered businesses handle consumers’ personal data, and House Bill 380 substantially amends its scope and requirements.

The amendments lower applicability and assessment thresholds, narrow some financial and employment-related exemptions, and expand protections for sensitive data, including certain inferences and neural data. They also strengthen consumer disclosures and profiling safeguards while requiring controllers to assess third parties and govern data sharing through contracts and due diligence. Together, these provisions shape privacy compliance for businesses that collect, use, or transfer Delaware residents’ data.