Regulations › US states › Louisiana
LDPA
Louisiana Data Privacy Act
WhenTakes effect 1 January 2027
Who enforces itState Attorney General (no private right of action)
Who it applies toBusinesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.
ThresholdsApplies to businesses with over $25 million in annual revenue, or handling data of 75,000+ con…
Universal opt-outAuthorized agents may opt consumers out through browser settings or global device settings
Cure periodFrom January 1 to July 31, 2027, the AG must give 30 days' notice before investigating
Request deadlineControllers must respond within 45 calendar days, extendable once by 45 days
Maximum penaltyUnder LUTPA, civil penalties of up to $5,000 per violation
Private actionNo private right of action
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws