Louisiana Data Privacy Act
Enacted Louisiana · In force Jan 1, 2027 · next deadline Jan 1, 2027 (in 3 months)
Deadlines
| Date | What happens | When |
|---|---|---|
| Jan 1, 2027 | Louisiana Data Privacy Act takes effectin 3 months | in 3 months |
| Jul 31, 2027 | 30-day cure period expiresin 10 months | in 10 months |
Summaries for reference, not legal advice. Check the official text.
What it does
Louisiana's comprehensive privacy law, signed May 29, 2026, gives consumers access, deletion, correction, portability and opt-out rights and requires conspicuous notice when sensitive or biometric data is sold. It uses CCPA-style applicability thresholds, including a $25M revenue trigger.
- Who it applies to
- Persons doing business in Louisiana that (1) have annual gross revenues over $25 million, (2) annually buy, receive, sell or share for commercial purposes personal information of 75,000+ consumers, households or devices, or (3) derive 50%+ of annual revenues from selling consumers' personal information.
- Penalties
- Violations are unfair and deceptive trade practices under the Louisiana Unfair Trade Practices and Consumer Protection Law (R.S. 51:1401 et seq.), excluding private rights of action; LUTPA civil penalties apply. 30-day notice-and-cure available only Jan 1 - July 31, 2027.
- Enforced by
- Louisiana Attorney General
- Official name
- Louisiana Data Privacy Act (SB 386, 2026 Regular Session, Act No. 502), La. R.S. 51:1780.1-1780.5
- Citation
- SB 386 (2026 RS), Act No. 502; La. R.S. 51:1780.1-1780.5
- Topics
- privacy, biometrics
Research notes
The act does not state a dollar penalty; LUTPA (R.S. 51:1407) civil penalties apply (commonly up to $5,000 per violation) but the figure was not verified against the official statute. One secondary source (Venable) misidentified the bill as SB 546; the official record shows SB 386 / Act 502.
Related
Alabama Personal Data Protection Act (APDPA)
CCPA / CPRA
Colorado AI Act
Connecticut Data Privacy Act (CTDPA)
Delaware Personal Data Privacy Act (DPDPA)Questions about Louisiana Data Privacy Act
- What are the Louisiana Data Privacy Act compliance deadlines?
- Jan 1, 2027: Louisiana Data Privacy Act takes effect. Jul 31, 2027: 30-day cure period expires.
- When does Louisiana Data Privacy Act take effect?
- Louisiana Data Privacy Act takes effect on Jan 1, 2027. The next milestone is Jan 1, 2027: Louisiana Data Privacy Act takes effect.
- Who does Louisiana Data Privacy Act apply to?
- Persons doing business in Louisiana that (1) have annual gross revenues over $25 million, (2) annually buy, receive, sell or share for commercial purposes personal information of 75,000+ consumers, households or devices, or (3) derive 50%+ of annual revenues from selling consumers' personal information.
- What are the penalties under Louisiana Data Privacy Act?
- Violations are unfair and deceptive trade practices under the Louisiana Unfair Trade Practices and Consumer Protection Law (R.S. 51:1401 et seq.), excluding private rights of action; LUTPA civil penalties apply. 30-day notice-and-cure available only Jan 1 - July 31, 2027.