Law note · Delaware
Delaware Personal Data Privacy Act, consumer rights
DPDPA gives a Delaware consumer the right to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling in furtherance of solely-automated decisions with legal or similarly significant effects. A controller must respond without undue delay and no later than 45 days after receipt, with one 45-day extension available.
What it asks of an app
- Give a Delaware consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
- Offer a Delaware consumer an opt-out of targeted advertising, sale, and profiling in furtherance of solely-automated decisions with legal or similarly significant effects, and honor universal opt-out preference signals as of January 1, 2026.
- Respond to a consumer rights request without undue delay and within 45 days of receipt, with one 45-day extension available.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Delaware statute text, Title 6 Chapter 12D, Delaware Code