Delaware Personal Data Privacy Act

Delaware's comprehensive consumer privacy law gives residents rights to access, correct, delete, and port their personal data, to get a list of third parties that received it, and to opt out of targeted advertising, sale, and significant-decision profiling. It has low applicability thresholds, requires opt-in consent for sensitive data and for targeted advertising or sale of data about known 13-17-year-olds, and requires honoring universal opt-out signals from 2026-01-01. HB 380 (signed 2026-09-02, effective 2027-01-01) lowers thresholds further and adds third-party contract and diligence duties, adverse-action notices for profiling reports, automated-decision impact assessments, a broader sensitive-data definition (including neural data and financial credentials), and narrows the employee-data exclusion for profiling.