Delaware Expands Privacy Law, Charting Path for Other States 

On June 16, the Delaware legislature voted to amend the 2025 Delaware Personal Data Privacy Act, expanding privacy protections in the state. The bill now awaits Gov. Matt Meyer’s signature. 

EPIC testified alongside Consumer Reports in support of H.B. 380. This bill continues the trend of states revisiting enacted privacy laws to strengthen protections.   

This bill also makes clear how harmful a law like the SECURE Data Act, proposed federal legislation that has an extraordinarily broad preemption provision, would be for consumers in states that have passed their own privacy laws. The SECURE Data Act would prevent states like Delaware from enacting stronger protections as technology changes.  

The SECURE Data Act would preempt Delaware’s privacy law, significantly weakening Delawareans’ privacy protections and doing away with state lawmakers’ opportunity to improve upon their law as H.B. 380 does.  

 The bill broadens DPDPA’s coverage by lowering its applicability threshold, narrowing an overbroad exemption for financial institutions, adding enhanced protections for sensitive data, giving consumers additional rights if entities use their personal data to profile them as part of a consequential decision, and more.  

EPIC thanks Delaware’s lawmakers for their continued dedication to protecting privacy and looks forward to working together on future legislation.