Delaware Personal Data Privacy Act, Department of Justice enforcement

Del. Code Ann. tit. 6, § 12D-111

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 January 2025.

An enforcement supervision rule binding private bodies.

As of 27 August 2026.

What it requires

Expect DPDPA violations to be enforced solely by the Delaware Department of Justice, never by a private plaintiff.
Do not assume a mandatory cure notice as of right. The mandatory cure period ended December 31, 2025; since January 1, 2026 the Department of Justice decides whether to offer one.

If you get it wrong

Private right of actionNo

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Delaware Department of Justice has authority to enforce DPDPA; a violation is deemed an unlawful practice under the Delaware Consumer Fraud Act, Del. Code tit. 6, section 2513, and is enforced solely by the Department of Justice. A cure notice was mandatory through December 31, 2025; from January 1, 2026 the Department may consider listed factors in deciding whether to offer a cure. The chapter creates no private right of action.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

official Delaware statute text, Title 6 Chapter 12D, Delaware Code

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app