PrivacyLawMap

Delaware Privacy Compliance Checklist

Delaware Personal Data Privacy Act — Step-by-step guide to compliance

Reviewed by PrivacyLawMap editorial teamLast verified: July 28, 2026

What is the DPDPA compliance checklist?

The DPDPA compliance checklist is a 6-step plan for meeting the Delaware Personal Data Privacy Act (DPDPA), Delaware's consumer privacy law, which took effect January 1, 2025. It is enforced by the Delaware Attorney General, with civil penalties up to $10,000 per violation and no cure period. Work through every step below, then confirm your specific obligations with the free applicability calculator.

Compliance Steps

Effective: January 1, 20250

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6

Key Enforcement Details

Enforced By
Delaware Attorney General
Penalty / Violation
$10,000
Cure Period
None
Private Right of Action
No

Related Resources

DPDPA Compliance Checklist FAQ

What is the DPDPA compliance checklist?

It is a 6-step plan organizations use to meet the Delaware Personal Data Privacy Act (DPDPA), which took effect January 1, 2025. The steps below cover consumer-rights request handling, privacy-notice disclosures, opt-out mechanisms, data-processing agreements, and security safeguards required under Delaware law.

Who has to comply with the Delaware Personal Data Privacy Act?

The DPDPA generally applies to organizations that handle Delaware residents' personal data above the law's revenue and data-volume thresholds. Whether it applies to you depends on the specifics — check your exact obligations with the free applicability calculator at /calculator rather than assuming.

What is the penalty for DPDPA non-compliance?

The Delaware Attorney General can impose civil penalties of up to $10,000 per violation and no cure period. There is no private right of action, so enforcement comes from the state, not individual lawsuits. Figures verified July 28, 2026.

Put DPDPA Into Practice on Your SiteSponsored

Termly builds and maintains a Delaware-ready privacy policy, a consent banner that recognizes universal opt-out signals like GPC, opt-in consent capture for sensitive data, and a workflow for the access, deletion and correction requests DPDPA grants.

Start Free with Termly

Does this law apply to you?

Use our free calculator to check if Delaware Personal Data Privacy Act applies to your business.

Check Applicability

Official Resources