Consumer Reports and the Electronic Privacy Information Center (EPIC) support H.B. 380, a bill to amend the Delaware Personal Data Privacy Act (DPDPA). The bill would extend to Delaware consumers important new protections, including expanding consumers’ rights around the use of profiling, improving key terms like “sensitive data,” and expanding the law’s coverage. It would also increase protections for personal data used in profiling, expand the right to access to include inferences that companies have made about consumers, and would allow consumers to request the list of third-parties to which businesses have sold their personal information. These important amendments largely reflect the last several years of work on privacy legislation across the states and would raise the baseline of protection for consumers and should be adopted.
At the same time, we urge the drafters to strengthen the bill by adding more meaningful data minimization provisions into the bill and by simply banning the sale of consumers’ sensitive data.
To read more, please see the attached letter.