Skip to main content
DPDPA · Effective 2025-01-01

Delaware Data Removal Guide (2026)

Delaware's Personal Data Privacy Act took effect January 2025. Its scope, nonprofit coverage subject to statutory exclusions, universal-opt-out requirement, and enforcement provisions may matter to qualifying controllers and Delaware residents; incorporation in Delaware alone does not determine coverage.

Research status: published state guide pending fresh official-source re-verification.

This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated August 13, 2026

At a glance

Comprehensive state privacy law
Recorded: DPDPA
Broker response deadline
45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
Enforcement
Delaware Department of Justice. Consumer Protection

Delaware Personal Data Privacy Act (DPDPA)

DPDPA applies to controllers that conduct business in Delaware or target Delaware residents and meet its 35,000-consumer or 10,000-consumer-plus-more-than-20%-sale-revenue threshold, subject to statutory exceptions. It can apply to nonprofit organizations, requires a 45-day response framework, and requires recognition of qualifying universal opt-out mechanisms beginning January 1, 2026. The Delaware DOJ has exclusive enforcement authority, with civil penalties up to $10,000 per violation; the mandatory cure rule ended after December 31, 2025, and any later cure opportunity is discretionary.

Read the full DPDPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.

What rights do Delaware residents have?

  • Delete, access, correct, port, opt-out
  • Nonprofit coverage subject to statutory exclusions
  • Universal opt-out recognition from January 1, 2026

Where does your data leak from in Delaware?

The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Delaware:

  • Delaware Division of Corporations filings
  • Delaware Judicial Information System
  • Delaware DMV records

Generate requests in under 60 seconds

Generate requests for 1009 US/global broker workflows for $9

OfflistMe prepares user-reviewed request drafts for the selected catalog routes. You choose the jurisdictional wording, review each draft, and send or submit it yourself; broker verification and outcomes remain outside OfflistMe's control.

What if a broker ignores your request?

If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Delaware Department of Justice. Consumer Protection complaint route. The authority's jurisdiction and available remedies vary.

File a complaint with Delaware Department of Justice. Consumer Protection

FAQ: Delaware data removal

Why does Delaware state law matter if I don't live in Delaware?+

Some businesses, including some data brokers, are incorporated in Delaware, but incorporation alone does not establish that the DPDPA covers a particular consumer request or that the Delaware AG can pursue every out-of-state conduct. Check the controller, processing, consumer, and statutory-scope facts before relying on Delaware as an enforcement route.

Related resources

Other state guides