{"data":{"id":"us-de/6-del.-c.-12d-107a","jurisdiction":"us-de","citation":"6 Del. C. § 12D-107A","heading":"Duties of third parties [Effective Jan. 1, 2027].","body":"(a) A third party that receives personal data from a controller or processor and does not have a contract as required by this chapter may not further process personal data disclosed to the third party.\n(b) A third party must comply with the terms of any contract required by this chapter.\n(c) A third party must provide necessary information to enable the controller to conduct and document data protection assessments as required under this chapter.\n(d) A third party must provide necessary information for the controller or the controller’s designated assessor to assess the third party consistent with § 12D-106(a)(11) of this title.\n(e) A third party subject to this chapter under § 12D-103(a)(1) or (2) of this title must comply with all provisions of this chapter.","path":["Title 6. Commerce and Trade","Subtitle II. Other Laws Relating to Commerce and Trade","Chapter 12D. Delaware Personal Data Privacy Act"],"source_url":"https://delcode.delaware.gov/title6/title6.pdf","current_through":"2026-10-01 (85 Del. Laws, c. 550)","vintage":"","retrieved_at":"2026-10-21T05:48:50Z","sha256":"eb193bf8f05032011ef221e83d647848c86141e1e7b30da27d8b67ec981b66b2","source_id":"us-de","stale":false,"prev":"us-de/6-del.-c.-12d-107--2","next":"us-de/6-del.-c.-12d-108"},"notice":"GroundRules: Original legal text. Not legal advice."}