PRESS RELEASE: EPIC Commends Delaware for Strengthening Privacy Law, Strictly Protecting Sensitive Data 

WILMINGTON, DE — Today, Delaware Governor Matt Meyer signed a law to strengthen the state’s privacy law and provide more robust protections for Delawareans’ personal data.  

The bill, H.B. 380, amends the Delaware Personal Data Privacy Act in several key ways, including:  

• Placing strict requirements on the sale of sensitive data;  
• Expanding the law’s coverage to apply to more businesses;  
• Giving consumers additional rights if their personal data is used to profile them and make consequential decision about them; and  
• Narrowing an overbroad exemption for financial institutions.  

“EPIC is grateful for the ongoing leadership of Rep. Griffith in sponsoring this bill and ensuring the state’s privacy law evolves to address privacy risks,” said EPIC Counsel Kara Williams. “This bill takes a significant step forward in protecting Delawareans’ privacy by placing strict limits on the sale of their most sensitive personal information. EPIC is thrilled to see Delaware join the growing number of states placing strict limitations on the sale of sensitive data.”  

Maryland, California, New Jersey, Oregon, Connecticut, and Virginia have all recently banned the sale of sensitive data, and Delaware’s new requirements prohibit the sale of sensitive data in nearly all situations. Under the new requirements, sensitive data can only be sold in Delaware if the sale is strictly necessary to provide a product or service a consumer affirmatively requests and the consumer consents to the sale after receiving clear and conspicuous notice of the category of data being sold, the purpose, and the party to whom it will be sold.  

EPIC commends Rep. Krista Griffith in particular for championing this issue and thanks the many other Delaware policymakers that contributed to this bill becoming law in the state. 

EPIC testified in support of this bill in both the House and the Senate and was grateful to be invited to attend the bill signing ceremony along with our partners at Consumer Reports.  

Please contact [email protected] with requests for further comment.  

### 

ABOUT EPIC 

The Electronic Privacy Information Center (EPIC) was established in 1994 to protect privacy, freedom of expression, and democratic values in the information age. Our mission is to secure the fundamental right to privacy in the digital age for all people through advocacy, research, and litigation.