Delaware compliance for digital product creators

Summary of research and practical guidance for: "Delaware compliance for digital product creators" (audience: US business owners, LLC founders) Key findings (high-level): - Delaware does not impose a state or local sales tax, but it levies a gross receipts tax (GRT) on sellers/providers for revenue sourced to Delaware; rates vary by business activity and the tax is paid by the business (not collected from customers). (Delaware Division of Revenue) - Delaware entity maintenance is handled by the Division of Corporations: businesses must file required reports and pay fees/annual taxes (Division of Corporations provides filing/payment services and links). Registered agent required; LLC/LP/GP tax payments are handled online. (Delaware Division of Corporations) - Delaware enacted a state consumer/data privacy law (Delaware Personal Data Protection Act — DPDPA) effective Jan 1, 2025. The law applies to businesses that do business in Delaware or target Delaware residents and that meet thresholds (control/process personal data of at least 35,000 consumers in the prior year; or 10,000+ consumers and >20% gross revenue from sale of personal data). The DPDPA creates controller/processor obligations, consumer rights (access, deletion, portability, opt-outs), data protection assessment requirements for higher-risk processing, and gives exclusive enforcement authority to the Attorney General. (Delaware DOJ) - FinCEN BOI (Beneficial Ownership Information) — as of March 26, 2025 FinCEN posted an alert removing BOI reporting requirements for U.S. entities/companies and U.S. persons; the BOI site contains alerts, FAQs, and filing system links. This is a critical federal-level change to check before preparing BOI filings. (FinCEN) Practical compliance checklist for digital product creators in/with Delaware exposure 1) Entity formation & maintenance (Division of Corporations) - Maintain a registered agent in Delaware (required for domestic/foreign entities). Use the Division of Corporations site to file annual reports and pay required entity taxes/fees (see the site’s filing and payment pages). Confirm exact due dates and fee amounts on corp.delaware.gov (fees and deadlines differ for LLCs, corporations, LPs). Keep entity status in good standing to preserve liability protection and access to Delaware courts. (See corp.delaware.gov services pages.) 2) Tax & nexus (Division of Revenue) - Understand that Delaware uses gross receipts tax (GRT) instead of a sales tax. If you generate Delaware-sourced revenue (including certain digital services, SaaS, licensing, subscriptions delivered to Delaware residents), you may owe GRT. The GRT applies to gross receipts without deductions; rates vary by activity (approx. 0.0945%–1.99% depending on classification). Register via Delaware One Stop and the Division of Revenue to obtain licenses and determine filing frequency (monthly/quarterly). If you have physical presence in Delaware (employees, inventory, offices) you will likely have immediate nexus for GRT and withholding/employment taxes. For remote sellers, track Delaware-sourced revenue carefully to avoid unexpectedly crossing nexus thresholds. (Delaware Division of Revenue) 3) Sales-tax vs GRT & digital products (tax specialists & state rules) - Although Delaware has no sales tax, digital products and SaaS may still trigger GRT obligations. Classification matters: some SaaS subscriptions are treated as services/gross receipts in Delaware; other states treat digital goods differently, so if you sell to customers across the U.S. you must follow destination-state rules for sales tax collection and remittance. Use tax automation or tax counsel to classify and track revenue by state. (Numeral, Avalara summaries) 4) Privacy, data protection and consumer rights (DPDPA) - If covered by Delaware’s DPDPA, update privacy notice to explicitly state applicability to Delaware residents (or all U.S. residents), implement consumer rights processes (access, deletion, portability, opt-outs for sale/targeted advertising), perform Data Protection Assessments for higher-risk processing (targeted advertising, sale, profiling, sensitive data), secure personal data, and provide a contact mechanism for consumer complaints (DPDPA requires a means to contact the AG via privacy@delaware.gov). The AG has exclusive enforcement authority and can impose civil penalties up to $10,000 per violation. (Delaware DOJ DPDPA FAQ) 5) BOI / Beneficial Ownership (FinCEN) - Monitor FinCEN guidance. As of the FinCEN BOI page alert (March 26, 2025), FinCEN announced removal of BOI reporting requirements for U.S. companies and U.S. persons — check FinCEN for current status before filing. The BOI e-filing system and FAQs remain the authoritative source for any continued obligations. (FinCEN BOI page) 6) Consumer protection, disclosures & other regulations - Follow FTC rules for clear advertising, refund & subscription disclosures, and email marketing rules. If you process payments or store payment info, follow PCI standards and state breach-notification rules. If your product targets children, comply with COPPA and get verified parental consent where required. ADA/accessibility for websites can also be relevant. These are federal obligations (FTC, COPPA) and general best practices for digital creators. 7) Operational checklist & recommended next steps - Step 0: Map your business operations: where your customers are, where you have employees or inventory, and where you target marketing. This determines nexus and which state laws apply. - Step 1: Formation & filings – confirm entity type and maintain Delaware compliance: registered agent, Division of Corporations filings, franchise tax/annual fees. Use corp.delaware.gov to file/pay. - Step 2: Register for Delaware business license and tax accounts via Delaware One Stop; contact Division of Revenue for GRT classification and filing schedule. - Step 3: Review privacy notice and DPA processes to comply with DPDPA thresholds; implement rights handling, assessments, and security safeguards. - Step 4: Check FinCEN BOI webpage for current CTA/BOI obligations before preparing any BOI filings. - Step 5: If selling to customers in other states, implement sales-tax collection systems and monitor economic nexus rules in destination states (state tax automation recommended). - Step 6: Maintain records and compliance calendar (entity filings, tax returns, privacy notices, security assessments). - Step 7: Consult Delaware-licensed counsel or CPA for complex questions, especially tax classification of digital products and franchise/LLC filing particulars. Limitations and items to verify (action items before publishing or finalizing compliance steps): - Confirm the exact names, due dates, and amounts of Delaware entity-specific filings and taxes (e.g., LLC annual fee/tax amount and due date, corporate franchise tax/annual report due dates) directly with Division of Corporations pages or a Delaware-licensed attorney/CPA. (corp.delaware.gov) - Confirm current BOI/CTA obligations with FinCEN; FinCEN guidance changed in 2025 and may be updated. Don’t rely on third-party summaries for BOI compliance; use fincen.gov. - For taxability of specific digital products (SaaS, downloadable goods, subscriptions), confirm classification with Delaware Division of Revenue or a tax advisor—GRT classification impacts rate and filing frequency. Conclusions / Next step recommendation for the user (practical): - For a blog/newsletter targeted to US business owners and LLC founders: produce a practical how-to post that covers (A) Delaware entity basics (registered agent, Div. of Corporations filings, where to pay), (B) taxes and nexus for digital products (no sales tax but GRT; track Delaware-sourced revenue; register via One Stop), (C) privacy compliance under the DPDPA (thresholds, required privacy notice elements, consumer rights, enforcement), (D) BOI/CTA status with link to FinCEN for latest updates, and (E) an operational checklist with recommended providers (registered agent, tax automation, privacy counsel). Cite the authoritative Delaware pages and FinCEN and recommend consulting a Delaware attorney or CPA for specific filing dates and tax classification. If you want, I can now: (1) draft the full blog post (SEO-optimized, with sections, checklist, and links to the citations above) tailored to your newsletter template and audience; or (2) draft a shorter newsletter summary and call-to-action directing readers to the full blog and to consult professional counsel. Which would you prefer?