Delaware AG Touts New Privacy Law in Effect
Delaware’s new privacy law gives the state AG office “important tools to enforce consumers’ data privacy and security,” said AG Kathy Jennings (D) on Monday. The comprehensive privacy law took effect Jan. 1 and will be enforced exclusively by Delaware DOJ’s Fraud and Consumer Protection Division.
Sign up for a free preview to unlock the rest of this article
The Delaware Personal Privacy Act covers for-profit entities that do business in the state and control or process personal data of at least 35,000 consumers or control or process data of at least 10,000 consumers and derive more than 20% of their revenue from selling personal data. In addition to consumer rights typical of state privacy bills, Delaware's law includes the ability to obtain a list of categories of third parties to whom personal data has been disclosed. Also uncommonly, Delaware included pregnancy and transgender or nonbinary status as sensitive data categories. Also, while most existing state laws cover children up to age 15, Delaware's applies up to age 17.
“Delawareans -- and most importantly, our children -- are armed with stronger privacy protections and more control over their online data,” said the law’s author, state Rep. Krista Griffith (D).
Iowa, Nebraska and New Hampshire privacy laws also took effect Jan. 1. A New Jersey privacy law takes effect Jan. 15.