Delaware Consumer Privacy and Data-Breach Law Updates
Delaware's governor signed two bills in September 2026 that update the state's existing privacy and data-breach framework. One bill amends the Delaware Personal Data Privacy Act, which took effect in January 2025, while the other updates the state's breach notification law.
Why this matters: Delaware is quietly tightening rules on both how companies handle personal data and how fast they must tell you when something goes wrong. These are not the same law, and that distinction matters. One governs what companies collect and why. The other governs what happens after a breach. Updating both together suggests the state is treating privacy and breach response as connected obligations, not separate checkboxes. If you operate in Delaware or your data is held by a company that does, these changes affect what protections you are owed.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.