Page traduite et vérifiée automatiquement. La version anglaise fait foi. Certaines parties restent en anglais le temps que leur traduction soit vérifiée. Voir en anglais · Signaler une erreur de traduction

Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →

Champ d'application

Seuils
2
35,000 consumers, or 10,000 consumers plus over 20% of gross revenue from sales; payment-only data excluded.6 Del. C. § 12D-103(a) · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Thresholds drop to 10,000 or 5,000 plus 20%, and third parties acquiring data are covered.
Exemptions
2
Entity-level GLBA financial institution exemption; HIPAA PHI exempt only at data level; nonprofits covered except victim-services groups.6 Del. C. § 12D-103 · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. GLBA entity exemption narrowed to specified institutions.

Données sensibles et mineurs

Données sensibles
2
Opt-in consent; categories include transgender or nonbinary status, sex life, and citizenship status.6 Del. C. §§ 12D-102, 12D-106 · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Adds neural data, financial credentials, government IDs; sale must be strictly necessary with notice and five-year consent records.
Enfants et adolescents
3
Under 13: parental consent (COPPA). Ages 13 to 17: consent required for targeted ads, sale and profiling with actual knowledge or willful disregard.6 Del. C. §§ 12D-103(d), 12D-106 · source ↗
Minimisation des données
1
Collection adequate, relevant and reasonably necessary to disclosed purposes.6 Del. C. § 12D-106 · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Standard becomes reasonably necessary and proportionate (level 2).

Droits des consommateurs

Droits
2
Access, correct, delete, portability, list of specific third parties, opt out of sale, targeted ads, and profiling (8 rights).6 Del. C. § 12D-104 · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Access expands to inferences and profiling information.
Délai de réponse aux demandes
2
45 days, extendable once by 45 days with notice.6 Del. C. § 12D-104 · source ↗
Recours
2
Internal appeal decided in writing within 60 days; denial must give a way to contact the Department of Justice.6 Del. C. § 12D-104(d) · source ↗
Opposition universelle
2
Must honor opt-out preference signals for targeted ads and sale from January 1, 2026.6 Del. C. §§ 12D-104, 12D-106(e) · source ↗

Obligations des entreprises

Évaluations
2
Controllers with data of 100,000+ consumers must assess targeted ads, sale, risky profiling and sensitive data; DOJ may request.6 Del. C. § 12D-108 · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Threshold drops to 50,000 and adds profiling impact assessments (level 3). Applies to processing from July 1, 2025.
Contrats de sous-traitance
3
Detailed contract terms, deletion, compliance information, assessments, and subcontracting only after controller gets a chance to object.6 Del. C. § 12D-107 · source ↗
Politique de confidentialité
2
Notice of categories, purposes, rights and appeals, third-party sharing and contact; clear sale and targeted ads disclosure with opt-out method.6 Del. C. § 12D-106(c)-(d) · source ↗ HB 380 (85 Del. Laws c. 463) amends the Act effective January 1, 2027. Adds controller identity and rights description.
Programmes de fidélité
2
Bona fide loyalty programs allowed; if an opt-out signal conflicts, honor the signal but may ask the consumer to confirm participation.6 Del. C. § 12D-106(b), (e) · source ↗
Données désidentifiées
3
Public no-reidentification commitment and contract duties for deidentified data; pseudonymous data exempt from rights with separation; oversight duty.6 Del. C. §§ 12D-102, 12D-109 · source ↗

Application

Autorité de contrôle
1
Delaware Department of Justice enforces exclusively.6 Del. C. § 12D-111 · source ↗
Période de régularisation
1
Mandatory 60-day cure expired December 31, 2025; cure now at Department of Justice discretion.6 Del. C. § 12D-111(b)-(c) · source ↗
Sanction maximale
2
Up to $10,000 per violation under the consumer fraud enforcement provisions.6 Del. C. § 12D-111 (via § 2513 and § 2522) · secondary source · source ↗ Statute text read only states violations are unlawful practices under § 2513; $10,000 figure from secondary source, § 2522 cite not verified.
Action privée
0
No private right of action.6 Del. C. § 12D-111(d) · source ↗
Pouvoir réglementaire
0
No rulemaking authority in the Act.6 Del. C. ch. 12D (no provision) · source ↗ DOJ may publish a list of presumptively authorized agents (§ 12D-105). Rulemaking under HB 380 not confirmed.

Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.

Bibliothèque des réglementations

Toutes les lois des États américains sur la vie privée, sur une seule carte

24 États disposent d’une loi générale sur la vie privée dans la bibliothèque, aux côtés des lois de l’UE, du Royaume-Uni, des lois fédérales américaines et des lois du reste du monde : 102 au total, chacune expliquée en termes simples avec ses sources. Sélectionnez un État pour voir ce qui s’y applique.

  • En vigueur
  • Entrée en vigueur prochaine
  • Lois sectorielles
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL