Page 7 - GDPR and US States General Privacy Laws Deskbook
P. 7

7 | General Privacy Laws Deskbook: US State Laws and GDPR
CONTENTS
Sec. 42-520. Controllers’ duties. Sale of personal data to third parties. Notice and disclosure .................................................................. 168
Sec. 42-521. (Processors’ duties. Contracts between controllers and processors. . ......................................................................................... 168
Sec. 42-522. (Controllers’ data protection assessments. Disclosure to Attorney General. . ........................................................................... 169
Sec. 42-523. De-identified and pseudonymous data. Controllers’ duties. Exceptions. Applicability of consumers’ rights. Disclosure and
oversight. . .......................................................................................................................................................................................................................... 170
Sec. 42-524. Construction of controllers’ and processors’ duties. ...................................................................................................................... 171
Sec. 42-525. Enforcement by Attorney General. Notice of violation. Cure period. Report. Penalty. . .......................................................... 173
Secs. 42-526 to 42-530. Reserved for future use.................................................................................................................................................... 174
Delaware Personal Data Privacy Act. ...................................................................................................................................................... 175
Chapter 12D. Delaware Personal Data Privacy Act.. ............................................................................................................................................ 176
§ 12D-101. Short title..................................................................................................................................................................................................... 176
§ 12D-102. Definitions................................................................................................................................................................................................... 176
§ 12D-103. Applicability of chapter............................................................................................................................................................................. 179
§ 12D-104. Consumer personal data rights............................................................................................................................................................... 181
§ 12D-105.  Designation of agent to exercise rights of consumer, including through universal opt-out mechanisms............................. 183
§ 12D-106. Duties of controllers.. ................................................................................................................................................................................ 183
§ 12D-107. Duties of processors.. ................................................................................................................................................................................ 185
§ 12D-108. Data protection assessments.................................................................................................................................................................. 186
§ 12D-109. De-identified data.. .................................................................................................................................................................................... 187
§ 12D-110. Exclusions.................................................................................................................................................................................................... 187
§ 12D-111. Enforcement.. .............................................................................................................................................................................................. 189
Indiana Code Concerning Trade Regulation. .......................................................................................................................................... 191
ARTICLE 15. CONSUMER DATA PROTECTION. .................................................................................................................................................. 192
Chapter 1. Applicability. .................................................................................................................................................................................................. 192
Sec. 1. . ................................................................................................................................................................................................................................ 192
Sec. 2. . ................................................................................................................................................................................................................................ 192
Sec. 3. . ................................................................................................................................................................................................................................ 194
Chapter 2. Definitions..................................................................................................................................................................................................... 194
Chapter 3. Personal Data; Consumer Rights. ............................................................................................................................................................. 198
Chapter 4. Data Controller Responsibilities; Transparency. .................................................................................................................................... 199
Chapter 5. Responsibility According to Role; Controllers and Processors.......................................................................................................... 201
Chapter 6. Data Protection Impact Assessments. ..................................................................................................................................................... 202
Chapter 7. Processing De-identified Data or Pseudonymous Data; Exemptions. ............................................................................................. 203
Chapter 8. Limitations. .................................................................................................................................................................................................... 203
Chapter 9. Investigative Authority............................................................................................................................................................................... 205
Chapter 10. Enforcement............................................................................................................................................................................................... 206
Chapter 11. Preemption; Other Laws. ......................................................................................................................................................................... 206




























































   5   6   7   8   9