Cybersecurity Policy Report, Legislation to Strengthen Data Breach Law Advances in Delaware, (Jun 26, 2026)
The Delaware state Senate voted 21-0 this week to pass a bill to expand the state’s data breach law to better inform the state Department of Justice’s Fraud and Consumer Protection Division of security breaches.
Under HB 381, businesses would also be required to provide notice to the attorney general’s office within 60 days of the determination of a breach. Currently, the attorney general’s office is informed only when a security breach affects more than 500 Delaware residents.
“As technology advances and personal data becomes more valuable, we need to raise the guardrails that protect Delawareans. HB 380 and 381 modernize Delaware’s data privacy protections to keep pace with AI, require your consent if a company wants to sell your sensitive data, and help ensure that your data stays yours,” Attorney General Kathy Jennings (D.) said in a statement.
Rep. Krista Griffith (D.), sponsor of the bill (H.B. 381, Reg Sess.), said the measure was intended to “strengthen transparency and accountability requirements when sensitive information is exposed.”
News: StateLegislation DataPrivacy DataBreach