Louisiana Privacy Law Attorneys

Louisiana Privacy Law Overview

Louisiana has enacted a comprehensive consumer privacy law that is not yet in force. The Louisiana Data Privacy Act takes effect January 1, 2027, so Louisiana businesses have a window now to map their data, update privacy notices, and stand up consumer-rights processes before obligations begin.

The Louisiana Data Privacy Act (LDPA)

The Louisiana Data Privacy Act (LDPA) was signed into law in May 2026 and takes effect January 1, 2027. It follows the mainstream multistate framework, giving Louisiana residents rights to access, correct, delete and port their personal data and to opt out of targeted advertising, the sale of data, and profiling, with opt-in consent required for sensitive data. Enforcement rests with the Louisiana Attorney General; there is no private right of action. Businesses should use the lead time before January 1, 2027 to build their compliance programs.

Status: Enacted but not yet in force — the law takes effect January 1, 2027. Businesses should prepare now.

Who Must Comply

The LDPA applies to businesses that meet Louisiana's applicability thresholds:

• Applicability thresholds are set by the statute and take effect with the law on January 1, 2027; businesses operating in or targeting Louisiana should assess coverage before that date.

Consumer Rights Under the LDPA

Louisiana residents can exercise the following rights over their personal data:

• Right to access / confirm what data is held
• Right to correct inaccurate data
• Right to delete personal data
• Right to data portability
• Right to opt out of targeted advertising
• Right to opt out of the sale of personal data
• Right to opt out of profiling for significant decisions

Sensitive personal data: Businesses must obtain opt-in consent before processing sensitive data (such as health, biometric, precise-geolocation, or demographic data).

Data Breach Notification in Louisiana

Louisiana requires notice to affected residents within 60 days and to the Attorney General for breaches involving Louisiana residents.

• Deadline to notify residents: No later than 60 days after discovery
• Attorney General notice: Notify the Louisiana Attorney General for breaches affecting residents
• Covered data: Name combined with sensitive identifiers (SSN, driver's license, financial-account or medical information, and more)

Federal Privacy Laws That Apply in Louisiana

Even where Louisiana law is silent, residents and businesses are covered by federal privacy statutes:

• HIPAA — health information held by providers, plans and their vendors
• GLBA — privacy and safeguards rules for financial institutions
• FERPA — student education records
• FCRA — consumer reporting agencies and background screening
• COPPA — online collection of data from children under 13
• FTC Act §5 — unfair or deceptive privacy and data-security practices

Louisiana Privacy Law FAQ

How a Louisiana Privacy Attorney Can Help