Louisiana has a comprehensive consumer privacy statute, the Louisiana Data Privacy Act (LDPA). This page collects our coverage touching Louisiana, alongside the federal rules that apply there. For the statute itself rather than the news, see our Louisiana privacy law page.
Breach Notification
November 9, 2026
Louisiana's breach chapter imposes a reasonable security duty and a record destruction duty before it reaches notice. Residents are told within 60 days of discovery, unless written reasons for delay reach the Attorney General inside that window. A separate regulation requires the Attorney General's copy within 10 days of resident notice, and R.S. 51:3075 allows a suit for actual damages.
Read more →
Employee Privacy
November 9, 2026
Louisiana's 2014 Personal Online Account Privacy Protection Act stops employers and educational institutions from asking for the login credentials to a personal online account. The definition of personal account is tightly drawn, the employer exceptions are longer than the school ones, and the chapter's only liability section limits exposure.
Read more →
Genetic Privacy
November 9, 2026
La. R.S. 22:1023 is a health insurance statute with reach beyond underwriting. It restricts insurers' use of genetic information, requires detailed signed authorizations, treats an insured's genetic information as property, and creates statutory damages of at least $50,000 or $100,000. A 2015 appellate decision read it to reach a diagnostic code inside an insurer's own systems.
Read more →