DE SB102

Adds name, birth date, and address in combination with other personal information to the definition of "personal information" under Delaware data breach law when there is an increased likelihood of identity theft.

Defines "digital data breach" as intentional, reckless, or negligent unauthorized display, use, disclosure, or copying of an individual's digital personal information without express authorization.

Establishes liability for persons or entities committing a digital data breach, requiring payment of either actual consequential damages and profits from unauthorized use, or $1,000 per breach per person if no actual damages can be proven.

Specifies that consequential damages include the present value of lifetime credit monitoring, technical expert consultation fees, and cost of equipment replacement.

Authorizes the Attorney General to bring enforcement actions through the Consumer Protection Division to address violations, recover direct economic damages, and obtain other appropriate relief.