HB 262 Summary

• Requires data brokers maintaining brokered personal information of at least 500 consumers to register annually with Delaware's Consumer Protection Unit by January 31, with registration fees ranging from $10 to $500 based on the number of consumers whose data is sold or licensed.

• Mandates data brokers provide detailed registration information including company contact details, opt-out methods, purchaser verification processes, security breach history, data collection practices, and answers to standardized questions about data categories and third-party recipients, with information to be published on a searchable public website by April 30.

• Prohibits acquiring or providing brokered personal information obtained through deception or fraudulent means, or where the information will be used for stalking, harassment, fraud, identity theft, or unlawful discrimination.

• Requires data brokers to develop and maintain comprehensive information security programs with administrative, technical, and physical safeguards to protect personal information, with safe harbor provisions for programs conforming to nationally-recognized cybersecurity standards or applicable federal regulations.

• Creates the Internet Privacy Protection Fund credited with registration fees and enforcement funds from the Department of Justice, designated for expenses related to administering the registration process, investigations, enforcement actions, and consumer education.