On June 16, 2026, the Delaware State Legislature passed House Bill (HB) No. 380. If signed into law, the bill will amend the Delaware Personal Data Privacy Act (DPDPA). The bill lowers the applicability threshold for DPDPA, expands consumer rights, and establishes new obligations for controllers and third-party recipients of data. The changes would go into effect on January 1, 2027.
In Depth
An expanded definition of “sensitive data”
“Sensitive data” under the DPDPA now includes national origin, mental or physical health treatment or status, transgender or nonbinary treatment, neural data, financial information (such as an account number, log-in information, or payment card information), and government-issued identification numbers.
