Share on LinkedInShare on LinkedIn

ARTICLE · 29 SEPTEMBER 2026

Quick Update: Delaware Privacy Act Amendments, CCPA Data Broker Enforcement, And Texas Warning On CIPA Demand Letters

Recent developments in Delaware, California, and Texas highlight a common theme that privacy compliance risk is becoming more operational and technical and more likely to arise from practices that may once have appeared routine. (1) Delaware has expanded the reach and substantive requirements of its comprehensive privacy law; (2) California continues its focus on data brokers by bringing a Delete Act action against a data broker; and (3) the Texas Attorney General has warned businesses about a surge in CIPA website tracking demand letters.

United StatesPrivacy

Recent developments in Delaware, California, and Texas highlight a common theme that privacy compliance risk is becoming more operational and technical and more likely to arise from practices that may once have appeared routine. (1) Delaware has expanded the reach and substantive requirements of its comprehensive privacy law; (2) California continues its focus on data brokers by bringing a Delete Act action against a data broker; and (3) the Texas Attorney General has warned businesses about a surge in CIPA website tracking demand letters.

Delaware Broadens the DPDPA

On September 2, 2026, Delaware Governor Matt Meyer signed House Bill 380, which materially amends the Delaware Personal Data Privacy Act (“DPDPA”). Most changes become effective January 1, 2027.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from