Download the checklist to:
- Reassess DPDPA scope, sensitive data processing, consent requirements, and age-aware controls for consumers ages 13 to 18
- Review profiling governance, anti-bias evidence, DPIAs, processor purposes, and third-party contract requirements
- Prepare privacy rights workflows for named third-party disclosures and strengthen the records needed to support consent, assessments, and compliance evidence
The checklist breaks HB 380 into practical actions across consent, privacy operations, legal, marketing, data governance, and third-party management. It also includes operational examples, a Delaware-specific readiness exercise, and a “what good looks like” section to help teams identify gaps before the January 1, 2027 effective date.