Services / Privacy Compliance / Delaware
Breach and consumer notification laws in Delaware — what a business must do when personal information is lost or exposed.
Did you know? Every state sets its own rules for when a breach is reportable, who must be told and how. In Delaware:
Breach reporting and notifications must be completed within 60 days
Vendors must report to the data owner immediately once a breach of security is determined
If a Social Security number is involved, each affected resident must be offered free credit monitoring for one year
Delaware entities holding personal information must maintain reasonable procedures to prevent its unauthorized acquisition, use, disclosure or destruction
The Attorney General may bring an action to ensure compliance or recover direct economic damages, or both
Additional Delaware laws include the Student Data Privacy Protection Act, the Online Privacy and Protection Act, Safe Destruction of Records Containing Personal Identifying Information, and the Right to Inspect Personnel Files Act
If your breach affects residents of other states, you must notify them under that state’s rules
Federal laws, industry regulations and out-of-country laws may also apply
Please note
This summary of regulations is provided for information purposes only. No action based on this summary alone should be undertaken. Each individual or entity must obtain appropriate guidance for its specific circumstances.
© 2018 CSR. All rights reserved. CSR refers to the corporation CSR Professional Services, Inc.
Readiness Pro
CSR Readiness Pro and the Breach Reporting Service handle the reporting and notification rules for you.
Mon – Fri · 8:00am – 5:30pm
Privacy compliance
Get started
Secure, scheduled shredding is the simplest way to keep paper records out of a breach report. Save 10% on your initial shred.
Mon – Fri · 8:00am – 5:30pm
