Delaware Expands State Privacy Law

Delaware has significantly expanded its Personal Data Privacy Act (DPDPA) effective January 1, 2027, lowering consumer thresholds for applicability and extending obligations on data controllers, including profiling, sensitive data protections, and contractual duties with third parties. The law broadens the right to opt out of profiling and imposes new due diligence and transparency requirements on businesses handling consumer data.

This Wire brief sits within Fusion42's coverage of Regtech.