Louisiana
Louisiana Data Privacy Act
Louisiana’s LDPA takes effect January 1, 2027 and brings the state into the modern consumer-privacy era: biometric data is sensitive data requiring opt-in consent, residents get deletion and access rights, and controllers face data-minimization duties. Its seven-month cure period gives businesses one warning shot and then ends. For a state with no prior biometric statute, it is a substantial jump.
Key Provisions
- Biometric data classified as sensitive data requiring opt-in consent
- Right to access, correct, and delete personal data held by controllers
- Right to opt out of targeted advertising, sale, and profiling
- Data minimization: collection limited to what is adequate and relevant
- Seven-month cure period after effectiveness, then direct AG enforcement
Penalties & Enforcement Record
AG enforcement with civil penalties per violation once the cure period lapses in mid-2027; injunctive relief available from day one.
What this means for your face
From January 2027, Louisianans gain a statutory deletion right our removal requests can cite directly. Until then we file under the target databases’ own policies and other applicable law, and we flip to LDPA citations at effectiveness.
Read our full breakdown of the LDPA → Get Protected