Ratings / Privacy Law
Sovereign Rating 5 / 5 · Sovereign — Data stays local. Best class.
The Delaware Personal Data Privacy Act (DPDPA), signed into law on September 11, 2023, significantly enhances consumer privacy by granting residents rights to access, correct, delete, and opt-out of the sale of their personal data, targeted advertising, and certain profiling acti
The Delaware Personal Data Privacy Act (DPDPA), signed into law on September 11, 2023, significantly enhances consumer privacy by granting residents rights to access, correct, delete, and opt-out of the sale of their personal data, targeted advertising, and certain profiling activities. A key mechanism is the requirement for explicit consent to process "sensitive data," which broadly includes categories like racial origin, religious beliefs, health conditions, and status as transgender or nonbinary, as defined in § 12D-102(30) of the official text. The law, effective January 1, 2025, also uniquely applies to non-profit organizations. Further strengthening protections, House Bill 380, signed on September 2, 2026, lowers applicability thresholds and expands safeguards for minors, including prohibiting processing sensitive data of children under 13 without parental consent. While lacking a private right of action, enforcement is exclusively handled by the Delaware Department of Justice.
The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.