Environment
No direct effect
Neutral — no direct effect identified.
Benefits
- No material direct effect identified.
Risks
- No material direct effect identified.
StateDelawareEnacted
HB 380: AN ACT TO AMEND TITLE 6 OF THE DELAWARE CODE RELATING TO PERSONAL DATA PRIVACY.
Krista Griffith
HB 380 status: Enacted — Signed by Governor (updated Sep 2, 2026).
Source
LegiScan
Confidence
High
Analysis basis
LegiScan full bill text
01
What this bill does
Official summary alongside an AI-generated read on where it stands and why.
Overall Score
71OUT OF 100
Score:71/100 civic fit
Risk:Moderate Risk
Impact:High Impact 80/100
Constitutionality90%
Bipartisan80%
Public opinion85%
Bill summary
This Act amends the Delaware Personal Data Privacy Act (DPDPA), Chapter 12D of Title 6, originally enacted in 2023, to more closely align the DPDPA with similar consumer data protection laws enacted in other states. This Act amends the applicability threshold of the DPDPA to entities who process the personal data of not less than 15,000 consumers, which on a population percentage basis closely aligns to thresholds in Connecticut and New Jersey. This Act amends Gramm-Leach-Bliley Act (GLBA) applicability exemptions, adopting approaches to financial data in similar laws in Connecticut, Montana, and Oregon, by exempting all data regulated by GLBA while limiting entity-level exemptions specifically to banks and insurers and their respective affiliates. This Act introduces contracting and due diligence requirements where businesses sell or disclose personal data to third parties and also harmonizes several DPDPA business requirements and consumer rights with personal data privacy laws in other states. This Act also makes technical changes to existing law to conform to the standards of the Delaware Legislative Drafting Manual.
02
Impact analysis
✦ AI analysisModeled effects across six domains, estimated from bill text and comparable legislation.
Economy
Mixed / Neutral
45%
Benefits
- Establishes clearer legal standards for data processing
- Reduces ambiguity in third-party data disclosure obligations
- Increases consumer trust through standardized privacy practices
Risks
- Increased compliance costs for small and medium-sized businesses
- Mandatory contractual requirements for third-party vendors
- Burden of regular data protection assessments
Society
Positive outlook
85%
Benefits
- Provides consumers stronger control over personal data
- Includes protection against discriminatory automated decisions
- Ensures transparency in the sale of sensitive consumer data
Risks
- Complexity of opt-out procedures for average consumers
- Potential for limited redress if controllers claim trade secrets
- Risk of data exclusion in specific essential services
Technology Industry
Positive outlook
60%
Benefits
- Standardizes privacy expectations for digital platforms
- Provides safe harbor protections for diligent controllers
- Encourages investment in privacy-enhancing technologies
Risks
- Lowered applicability thresholds affect smaller startups
- Significant operational changes to data management systems
- Strict oversight requirements for third-party integrations
Civic Accountability
Positive outlook
90%
Benefits
- Empowers the Attorney General to enforce privacy laws
- Requires documentation of data protection assessments
- Establishes a mechanism for consumer rights requests
Risks
- Assessments are confidential and not public records
- Enforcement is centralized solely within the Department of Justice
- Potential delays in Attorney General investigations
Public Health & Safety
Positive outlook
75%
Benefits
- Protects sensitive health information from unauthorized sale
- Requires specific protections for neural and diagnostic data
- Limits discriminatory use of data in healthcare services
Risks
- Exclusions for certain health-related data could cause gaps
- Complexity in integrating existing HIPAA with state law
- Potential risk to patient care if profiling access is restricted
03
How trustworthy & consequential it is
Sourcing already shown above, this is what the analysis found worth flagging.
Source
LegiScan
Official bill text or data from LegiScan.
Confidence
High
Information is complete and verified.
Analysis basis
LegiScan full bill text
Source used for this bill's analysis.
Source note
Compliance costs for businesses with between 10,000 and 35,000 consumers will increase significantly.
Analysis scope
Statute interpretation depends on interplay with existing federal laws like HIPAA and FCRA.
04
Where it stands
Official recordSigned by Governor
- IntroducedComplete
- CommitteeComplete
- Chamber votesComplete
- Final agreementComplete
- GovernorComplete
- EnactedComplete
05
How it affects your district
✦ Personalized
Set your location
Add your district to see how this bill may affect your community and who to contact.
Your Representatives
Your representatives appear here once you add your location.
06
Take action
Contact your representatives
Let them know how you feel about this bill.
Share your view
Join the discussion and see what others are saying.
Track this bill
Stay updated on progress and changes.