Jurisdiction

Delaware privacy and AI laws

Regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Delaware Personal Data Privacy Act (DPDPA)Comprehensive privacy law with low applicability thresholds and no exemption for nonprofits. Grants rights to access, correct, delete, port, and opt out of targeted advertising, sale and profiling, and requires honoring opt-out preference signals from Jan 1, 2026. A 2026 amendment (85 Del. Laws c. 463) lowers thresholds further and adds third-party duties from Jan 1, 2027.Next: Jan 1, 2027 Amended thresholds and third-party duties take effect · in 2 months

Upcoming deadlines

Takes effectJan 1, 2027 · in 2 months · Source

Amended thresholds and third-party duties take effectApplicability drops to 10,000 consumers (or 5,000 + 20% revenue from sale) and new third-party duties (12D-107A) apply.

Past deadlines

ComplianceJan 1 · 10 months ago · Source

Opt-out preference signals must be honoredControllers must allow opt-out of targeted advertising and sale via opt-out preference signals (12D-106).

EnforcementDec 31, 2025 · 10 months ago · Source

Mandatory 60-day cure period expiresMandatory notice-and-cure ends Dec 31, 2025; from Jan 1, 2026 DOJ decides whether to offer a cure using statutory factors.

Takes effectJan 1, 2025 · 22 months ago · Source

DPDPA takes effectConsumer rights and controller duties apply; 60-day mandatory cure period begins.