Louisiana Data Privacy Act

Louisiana's comprehensive consumer privacy law, enacted by Act 502 of the 2026 Regular Session and effective January 1, 2027. It gives Louisiana residents rights to confirm, access, correct, delete, and port their personal data and to opt out of targeted advertising, sale, and significant-decision profiling, and it requires controllers to minimize data, secure it, get consent for sensitive data, publish a privacy notice, and conduct data protection assessments. Unlike most state models, applicability turns on a $25 million revenue threshold (CCPA-style) rather than only a consumer-count threshold.