State Guide
Delaware Privacy & Data Security Laws
Every statute below can apply to a business handling Delaware residents' data, depending on your revenue, the number of Delaware consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Lower thresholds than most states: applies at 35,000+ Delaware consumers, or 10,000+ if 20%+ of revenue comes from selling personal data. Nonprofit exemption only covers insurance-fraud-prevention organizations — most nonprofits are covered. Watch this one closely: HB 380 passed the legislature Jun 16, 2026 and would lower thresholds further (to 10,000/5,000+20%) effective Jan 1, 2027 — the governor's signature was still pending as of this writing.
Data Security & Breach Notification · 1
Requires notifying affected residents (and often the state AG/regulator) after a breach of unencrypted personal information such as SSNs, driver's license/state ID numbers, or financial account numbers. Applies regardless of company size whenever you hold covered personal information about a resident of this state.