Louisiana
Louisiana Data Privacy Act
Louisiana’s LDPA takes effect January 1, 2027 and brings the state into the modern consumer-privacy era: biometric data is sensitive data requiring opt-in consent, residents get deletion and access rights, and controllers face data-minimization duties. Its seven-month cure period gives businesses one warning shot and then ends. For a state with no prior biometric statute, it is a substantial jump.
Key Provisions
- Biometric data classified as sensitive data requiring opt-in consent
- Right to access, correct, and delete personal data held by controllers
- Right to opt out of targeted advertising, sale, and profiling
- Data minimization: collection limited to what is adequate and relevant
- Seven-month cure period after effectiveness, then direct AG enforcement
Penalties & Enforcement Record
AG enforcement with civil penalties per violation once the cure period lapses in mid-2027; injunctive relief available from day one.
What this means for your face
From January 2027, Louisianans gain a statutory deletion right. We file opt-out requests for Louisiana residents through each engine’s own opt-out process.
Read our full breakdown of the LDPA → Get Protected