Regulatory Watch  /  Delaware  /  Amendment
High impactAmendmentSigned

Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027

Governor Meyer signed HB 380 on September 2, amending the Delaware Personal Data Privacy Act. The amendment expands the definition of sensitive data, lowers applicability thresholds, adds new contractual and due‑diligence requirements for third‑party disclosures, and modifies consumer rights. The changes become effective on January 1, 2027.

Why it matters: The amendment significantly strengthens privacy protections and expands data‑controller obligations in Delaware.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Updating the Delaware Personal Data Privacy Act: The “First State” Becomes the Latest to Get a Privacy Refresh
Future of Privacy Forum · primary source · Sep 3, 2026
Delaware Expands State Privacy Law
Hunton Privacy & Cybersecurity Law Blog · Sep 10, 2026
Details
JurisdictionDelaware
RegulatorCFPB
LawFair Credit Reporting Act
BillHB 380
StatusSigned
PublishedSeptember 3, 2026
EffectiveJanuary 1, 2027
Topicsconsent, profiling, automated decision making, access, correction, opt out, data minimization, purpose limitation, security, privacy
Datapersonal, sensitive, biometric, health, financial