Compliance Radar · Privacy and consent
Delaware, Iowa, Nebraska and New Hampshire privacy laws take effect
Four more state privacy laws took effect, two with opt-out signal rules.
- Status
- In force. Delaware's thresholds drop on January 1, 2027.
- Takes effect
- January 1, 2025
- Announced
- 2023 (Delaware, Iowa) and 2024 (Nebraska, New Hampshire)
- Type
- law
What changed
All four add access, deletion and sale opt-out rights; all but Iowa need opt-in for sensitive data. GPC has been required in New Hampshire since January 1, 2025, and Delaware since January 1, 2026. Cure periods there ended December 31, 2025.
Who it affects
Delaware and New Hampshire: 35,000+ consumers. Iowa: 100,000+. Nebraska: any business that isn't an SBA small business.
What to do
- Apply each state's opt-outs to targeted ads and sales.
- Honor GPC for New Hampshire and Delaware visitors.
- Get opt-in consent for sensitive data outside Iowa.
- Answer rights requests within 45 days.
What ComplyMo already handles
Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.
Sources
- Delaware Code, 6 Del. C. ch. 12D (opens in a new tab)
- New Hampshire RSA ch. 507-H (opens in a new tab)
- Iowa Code ch. 715D (opens in a new tab)
- Neb. Rev. Stat. 87-1103 (opens in a new tab)
Summary of public sources, not legal advice.