A new consumer data privacy enacted in Delaware applies to wider range of businesses than similar laws in other states, but critics say a legal technicality makes it toothless.
Instead of providing what is called a private right of action, the Delaware Personal Data Privacy Act will see cases adjudicated by the state’s justice department, which will issue notices to companies in violation, giving them 60 days to achieve compliance.