State Breach Law

Delaware Data Breach Notification Law

6 Del. C. § 12B-101 to 12B-104 • Effective 2005-06-28

Delaware gives you 60 days to notify affected residents. If 500+ people are affected, also notify the Attorney General.

Notification deadline: 60 days

Enforcement: Delaware Attorney General

Overview

Delaware requires notification within 60 days of breach determination. AG notification required for breaches affecting 500+ residents.

Who Must Be Notified

  • Affected Delaware residents
  • Delaware Attorney General (if 500+ affected)

Covered Data Types

Social Security number, Driver's license number, Financial account numbers, Passport number, Biometric data

Notification Requirements

  • Written notice
  • Electronic notice permitted

Is your business exposed?

Exemptions

  • Encrypted data
  • Good faith acquisition

Penalties

Up to $10,000 per breach

If You Experience a Breach

  1. 1.

    Notify residents within 60 days

  2. 2.

    Notify AG if 500+ affected

Official Source

https://attorneygeneral.delaware.gov/

Other State Breach Laws

New York, Texas, Florida

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required