Environment
No direct effect
Neutral — no direct effect identified.
Benefits
- No material direct effect identified.
Risks
- No material direct effect identified.
Krista Griffith
HB 381 status: Enacted — Signed by Governor (updated Sep 2, 2026).

Source
OpenStates
Confidence
Low
Analysis basis
OpenStates summary
Official summary alongside an AI-generated read on where it stands and why.
Overall Score
Bill summary
HB 381 amends Chapter 12B of Title 6 of the Delaware Code to specifically clarify the conditions and timelines under which businesses are required to notify the Delaware Attorney General regarding computer security breaches.
Businesses operating within Delaware that handle sensitive personal or computer data, and the Attorney General’s office, which acts as the oversight entity.
Entities must adhere to clarified notification triggers and timelines as established by the amended statutes.
Implied administrative and legal compliance costs for businesses to ensure internal reporting workflows meet the revised statutory standards.
Enacted as of September 2, 2026.
Improved clarity in legal expectations, enhanced state oversight of cybersecurity incidents, and reduced ambiguity for firms navigating breach response.
Potential administrative burden for businesses and the risk of penalties if internal protocols do not align with the newly clarified reporting requirements.
The specific technical criteria or definitions for a 'breach' under the amendment are not detailed in the source summary.
Modeled effects across six domains, estimated from bill text and comparable legislation.
No direct effect
Neutral — no direct effect identified.
Positive outlook
No direct effect
Neutral — no direct effect identified.
Positive outlook
Positive outlook
No direct effect
Neutral — no direct effect identified.
Sourcing already shown above, this is what the analysis found worth flagging.
Source
OpenStates
Official bill text or data from OpenStates.
Confidence
Low
Information is limited or incomplete.
Analysis basis
OpenStates summary
Source used for this bill's analysis.
Source note
Businesses must conduct internal legal reviews to ensure compliance with updated notice triggers.
!Analysis scope
Analysis based solely on abstract; full legislative text not reviewed.

Set your location
Add your district to see how this bill may affect your community and who to contact.
Your Representatives
Your representatives appear here once you add your location.

Contact your representatives
Let them know how you feel about this bill.

Share your view
Join the discussion and see what others are saying.

Track this bill
Stay updated on progress and changes.