20% off all courses - Use code NEWYEAR20 at checkout.

Delaware Personal Data Privacy Act (DPDPA) Awareness Course

Coming Soon: March 2026 Delivery: 100% online Duration: 35-40 minutes Certificate on Completion
0:00
15,000+ learners across our course collection. Immediate access on launch. 14 day 100% money-back guarantee.

Delaware is America's corporate capital - over half of all US publicly traded companies and 60% of Fortune 500 companies are incorporated there. The Delaware Personal Data Privacy Act brings comprehensive privacy requirements to businesses operating in or targeting the First State, with unique features like nonprofit coverage and a third-party disclosure right.

This course provides practical guidance on the Delaware Personal Data Privacy Act. We cover who must comply (including the coverage of nonprofits), the rights Delaware residents have over their data including the unique third-party disclosure right, sensitive data requirements, and enforcement mechanisms.

The DPDPA became effective on January 1, 2025, with phased implementation of certain requirements through 2026. It has higher penalties than most state laws ($10,000 per violation) and provides a 60-day cure period expiring in December 2025. No technical background required - just focused, practical training your team can apply immediately.

Why learn about the DPDPA?

  • Comply with privacy requirements in America's corporate capital
  • Understand the unique third-party disclosure right Delaware provides
  • Know whether your nonprofit must comply with DPDPA
  • Avoid penalties of up to $10,000 per violation
  • Prepare for the phased implementation through 2026

Course features

Delaware-specific

Focused entirely on the DPDPA with Delaware-specific requirements, including nonprofit coverage and the third-party disclosure right.

Practical scenarios

Real-world examples showing how the DPDPA applies in everyday business situations for both businesses and nonprofits.

Current guidance

Covers the law as effective January 2025 with the phased implementation timeline and latest compliance guidance.

Official sources

Built from the Delaware Code and Attorney General guidance, with references to official documentation.

Learning with us

Course information

Learning outcomes

  • Understand when and how the DPDPA applies to your organisation
  • Know whether your nonprofit must comply with Delaware's privacy law
  • Handle the unique third-party disclosure right correctly
  • Process consumer data requests within required timeframes
  • Understand enforcement, the cure period, and potential penalties

Training recommendations

  • All employees who handle customer data should complete this training.
  • Annual refresher training is recommended to stay current with amendments and enforcement trends.
  • Teams handling sensitive data or consumer requests may benefit from additional role-specific training.

This course is recommended for

Employees who handle customer or member data at organisations that conduct business in Delaware or target Delaware residents. This includes marketing, sales, customer service, HR, IT, and compliance teams at both businesses and nonprofit organisations that meet the applicability thresholds.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).

Course content

In this section we introduce the Delaware Personal Data Privacy Act and explain why it matters for your organisation. We cover what makes Delaware's law unique, including its nonprofit coverage and phased implementation.

Lessons

  • Introduction to the DPDPA
  • Why Delaware matters: corporate capital of America
  • Effective date: January 1, 2025
  • Phased implementation through 2026
  • Key definitions you need to know

Delaware's law covers both businesses and most nonprofits. This section covers the applicability thresholds and the unique treatment of nonprofit organisations.

Lessons

  • The 35,000 consumer threshold
  • The 10,000 consumer + revenue threshold
  • Nonprofit coverage under DPDPA
  • Small business considerations
  • Entities exempt from the DPDPA

Delaware residents have comprehensive rights over their personal data, including a unique third-party disclosure right. We cover what those rights are and how to handle requests.

Lessons

  • The right to know and access
  • The right to correct inaccuracies
  • The right to delete personal data
  • The right to data portability
  • The unique third-party disclosure right
  • The right to opt out of sales, profiling, and targeted advertising
  • Handling consumer requests within 45 days

The DPDPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data in Delaware and how to implement proper consent mechanisms.

Lessons

  • What is sensitive data under DPDPA?
  • The opt-in consent requirement
  • Children's data and parental consent
  • Biometric and precise geolocation data
  • Practical consent workflows

This section covers the practical obligations organisations must meet, including privacy notices, data protection assessments, and contracts with processors.

Lessons

  • Privacy notice requirements
  • Data protection assessments
  • Data minimisation and purpose limitation
  • Security obligations
  • Processor and contractor requirements

Understand how the DPDPA is enforced, the cure period, and what penalties look like. Delaware has higher fines than many other states.

Lessons

  • Attorney General enforcement authority
  • The 60-day cure period (expires December 2025)
  • Penalties up to $10,000 per violation
  • No private right of action
  • Responding to investigations

Test your knowledge with scenario-based questions covering all the key DPDPA concepts from the course.

Lessons

  • Knowledge check (10 questions)

How it works

Step 1

Get notified

Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As the DPDPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and amendments.

What's included

Training

  • Distraction-free online learning platform
  • Scenario-based end of course assessment

Updates

  • Access to all course material updates and enhancements for the length of your access period

Certification

  • Certificate on completion

Course FAQs

Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.

This course is designed for employees who handle customer data at organisations that may be subject to Delaware's privacy law. This includes marketing, sales, customer service, HR, and IT teams at businesses and nonprofits doing business in Delaware or handling data of Delaware residents.

Delaware has several unique features: it covers most nonprofit organisations, includes a unique right for consumers to know which third parties received their data, has higher penalties ($10,000 per violation), and uses lower thresholds (35,000 consumers). Delaware is also America's corporate capital, where most US companies are incorporated.

DPDPA applies to organisations that conduct business in Delaware or target Delaware residents, AND either: (a) control or process personal data of 35,000+ Delaware consumers, or (b) control or process data of 10,000+ Delaware consumers and derive more than 20% of gross revenue from selling personal data. Most nonprofits are also covered.

The Delaware Attorney General can impose civil penalties of up to $10,000 per violation - higher than most other state laws. There is a 60-day cure period until December 2025, after which the Attorney General can take direct enforcement action. There is no private right of action.

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.

Get notified when this course launches

Sign up to our newsletter to be the first to know when this course is available.

This course will be included in Measured Collective Plus

Get access to all our courses with one subscription from £236/year.

Learn About MC Plus

Available courses

PECR & ePrivacy for Marketers

PECR & ePrivacy for Marketers

UK PECR / ePrivacy

Included in PLUS

Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.

View Course
Abstract blue cityscape with tall buildings

GDPR Refresher Training Course

UK UK GDPR

Included in PLUS

A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…

View Course
woman reading book in training room with team members

GDPR Essentials Course

UK UK GDPR

Included in PLUS

Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.

View Course