Delaware Personal Data Privacy Act, consumer rights

Del. Code Ann. tit. 6, § 12D-104

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 January 2025.

A data subject rights rule binding private bodies.

As of 27 August 2026.

What it requires

Give a Delaware consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
Offer a Delaware consumer an opt-out of targeted advertising, sale, and profiling in furtherance of solely-automated decisions with legal or similarly significant effects, and honor universal opt-out preference signals as of January 1, 2026.
Respond to a consumer rights request without undue delay and within 45 days of receipt, with one 45-day extension available.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

DPDPA gives a Delaware consumer the right to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling in furtherance of solely-automated decisions with legal or similarly significant effects. A controller must respond without undue delay and no later than 45 days after receipt, with one 45-day extension available.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions

Read the law

official Delaware statute text, Title 6 Chapter 12D, Delaware Code

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app