Delaware Personal Data Privacy Act

HB 154

Enacted
2023-09-11
Effective
2025-01-01
Status
enacted
Verified
2026-03-18

Regulatory Snapshot: Delaware Personal Data Privacy Act

Delaware Personal Data Privacy Act (HB 154) is an enacted law in Delaware under the Data Privacy category. It was enacted on 2023-09-11 and becomes effective on 2025-01-01. Delaware currently reports 4 tracked regulations with 4 already in force, giving the state a regulatory strictness score of 59/100 relative to the national baseline. PlainRegWatch last verified this entry on 2026-03-18.

Nationally, 21 states have enacted data privacy statutes and 0 additional bills remain pending — 21 distinct jurisdictions have codified rules in this area so far. That places Delaware within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in HB 154 itself.

Applicability under Delaware Personal Data Privacy Act: 35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits. Penalty exposure is documented as: $10,000/violation. AG with 60-day cure (sunsets Dec 2025). Notable exemptions: Government, HIPAA, GLBA (nonprofits NOT fully exempt)..

Summary

Strong with children data protections. Applies to nonprofits.

Key Requirements

Full rights. Children protections. Universal opt-out. Nonprofit coverage.

Penalties

$10,000/violation. AG with 60-day cure (sunsets Dec 2025).

Applicability

35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits.

Exemptions

Government, HIPAA, GLBA (nonprofits NOT fully exempt).

Frequently Asked Questions

Which states have data privacy regulations?

As of the last verification, 21 states have enacted data privacy regulations, with 0 additional bills pending across other states. Delaware is among the states that has enacted such legislation. Browse all data privacy regulations at plainregwatch.com for the complete state-by-state comparison.

When was Delaware Personal Data Privacy Act enacted?

Delaware Personal Data Privacy Act was enacted on 2023-09-11 and became effective on 2025-01-01. It was introduced as HB 154.

What are the penalties for violating Delaware Personal Data Privacy Act?

$10,000/violation. AG with 60-day cure (sunsets Dec 2025). Note that enforcement mechanisms and penalty structures may vary. Consult the official statute and qualified legal counsel for specific compliance requirements.

Does Delaware Personal Data Privacy Act apply to small businesses?

35K+ consumers, or 10K+ with 20%+ data sale revenue. Includes nonprofits. Many state regulations include thresholds or exemptions for smaller organizations. Review the full applicability criteria and consult legal counsel to determine your obligations.

How does Delaware compare to other states on data privacy?

Delaware has a regulatory strictness score of 59/100, based on 4 enacted regulations out of 4 tracked. Nationally, 21 states have enacted data privacy laws. Visit our state comparison page for a full ranking.

Where can I read the full text of Delaware Personal Data Privacy Act?

The official text of Delaware Personal Data Privacy Act (HB 154) is available from the Delaware legislature. PlainRegWatch links to the official source for every tracked regulation. We recommend reviewing the full statute alongside qualified legal counsel for compliance planning.

Regulation Guides

Plain-language guides to help you understand the broader regulatory landscape.

Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since last verification (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.

More Delaware Regulations

Related

Data sourced from official state legislatures, IAPP, NCSL, and federal regulatory trackers. See our methodology for details. Retrieved and formatted by PlainRegWatch Editorial

Verify with EPA →