Data Privacy · Delaware
Delaware Personal Data Privacy Act
HB 154 - enacted in Delaware.
- Enacted
- Status
- 2023
- Enacted
- 21
- States with data privacy laws
- 59/100
- Delaware strictness
The bottom line
Delaware Personal Data Privacy Act is an enacted law in Delaware, part of a mature, broadly-adopted data privacy landscape.
- Enacted
- effective 2025-01-01
- 21
- states have data privacy laws
- 21/21
- data privacy laws enacted nationally
- 59/100
- Delaware strictness score
Data compiled 2026-03-18 from the official Delaware legislative record linked below; laws can be amended or repealed after this date.
Regulatory Snapshot: Delaware Personal Data Privacy Act
Delaware Personal Data Privacy Act (HB 154) is an enacted law in Delaware under the Data Privacy category. It was enacted on 2023-09-11 and becomes effective on 2025-01-01. Delaware currently reports 4 tracked regulations with 4 already in force, giving the state a regulatory strictness score of 59/100 relative to the national baseline. PlainRegWatch compiled this entry's data on 2026-03-18; consult the linked official source for the current, authoritative text.
Nationally, 21 data privacy statutes have been enacted and 0 additional bills remain pending - 21 distinct jurisdictions have codified rules in this area so far. That places Delaware within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in HB 154 itself.
Applicability under Delaware Personal Data Privacy Act: 35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits. Penalty exposure is documented as: $10,000/violation. AG with 60-day cure (sunsets Dec 2025). Notable exemptions: Government, HIPAA, GLBA (nonprofits NOT fully exempt)..
Summary
Strong with children data protections. Applies to nonprofits.
Key Requirements
Full rights. Children protections. Universal opt-out. Nonprofit coverage.
Penalties
$10,000/violation. AG with 60-day cure (sunsets Dec 2025).
Applicability
35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits.
Exemptions
Government, HIPAA, GLBA (nonprofits NOT fully exempt).
Official Source
https://legis.delaware.gov/BillDetail?LegislationId=140388How Delaware compares on data privacy
21 states regulate data privacy - Delaware ranks #7 by overall regulatory strictness. Bar = state strictness score (0–100).
| # | State | Strictness |
|---|---|---|
| 1 | California | 100 |
| 2 | Colorado | 76 |
| 3 | Texas | 69 |
| 4 | Connecticut | 62 |
| 5 | Minnesota | 62 |
| 6 | Oregon | 62 |
| 7 | Delaware (this state) | 59 |
| 8 | Virginia | 59 |
| 9 | Utah | 55 |
| 10 | Florida | 48 |
Frequently Asked Questions
Which states have data privacy regulations?
As of the last verification, 21 states have enacted data privacy regulations, with 0 additional bills pending across other states. Delaware is among the states that has enacted such legislation. Browse all data privacy regulations at plainregwatch.com for the complete state-by-state comparison.
When was Delaware Personal Data Privacy Act enacted?
Delaware Personal Data Privacy Act was enacted on 2023-09-11 and became effective on 2025-01-01. It was introduced as HB 154.
What are the penalties for violating Delaware Personal Data Privacy Act?
$10,000/violation. AG with 60-day cure (sunsets Dec 2025). Note that enforcement mechanisms and penalty structures may vary. Consult the official statute and qualified legal counsel for specific compliance requirements.
Does Delaware Personal Data Privacy Act apply to small businesses?
35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits. Many state regulations include thresholds or exemptions for smaller organizations. Review the full applicability criteria and consult legal counsel to determine your obligations.
How does Delaware compare to other states on data privacy?
Delaware has a regulatory strictness score of 59/100, based on 4 enacted regulations out of 4 tracked. Nationally, 21 states have enacted data privacy laws. Visit our state comparison page for a full ranking.
Where can I read the full text of Delaware Personal Data Privacy Act?
The official text of Delaware Personal Data Privacy Act (HB 154) is available from the Delaware legislature. PlainRegWatch links to the official source for every tracked regulation. We recommend reviewing the full statute alongside qualified legal counsel for compliance planning.
Regulation Guides
Plain-language guides to help you understand the broader regulatory landscape.
Explore Regulations
Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since this data was compiled (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.
More Delaware Regulations
The bottom line
This law is already in force - here's what matters for data privacy compliance.
- Delaware Personal Data Privacy Act is enacted in Delaware, effective 2025-01-01. Official source
- 21 states now regulate data privacy; Delaware ranks #7 by strictness - compare requirements before you operate across state lines. Compare states
- See every regulation Delaware tracks across all five policy areas. Delaware profile
Summaries are general information, not legal advice; always confirm against the official statute and qualified counsel.
Read our methodology - how this data is sourced, computed, and verified.
Related
Verify with the official Delaware source →
Every figure on PlainRegWatch is rendered directly from state source data, no number is typed in by an editor. This page draws directly on federal and state source data, no figure is typed in by an editor. See our editorial standards & corrections policy, the methodology behind these numbers, or report a data error.