Privacy Laws in Louisiana: What You Need to Know

Louisiana is on the verge of joining the growing list of states with comprehensive consumer data privacy legislation. With Senate Bill 386 — the Louisiana Data Privacy Act — advancing through the legislature in 2026, Louisiana residents will soon have new rights over how companies collect, use, and sell their personal data. Here's everything you need to know.

The Louisiana Data Privacy Act (SB 386)

In the 2026 Regular Session, Louisiana Senator Connick introduced Senate Bill 386, creating the Louisiana Data Privacy Act. After two previous failed attempts — Senate Bill 199 in 2023 and House Bill 947 in 2024 — this legislation has gained significant momentum. Both chambers have advanced the bill, and if signed into law, it would take effect on January 1, 2027.

Louisiana would join states like California, Virginia, Colorado, Connecticut, and others that have already enacted comprehensive privacy frameworks. The law aims to give Louisiana consumers meaningful control over their personal information in an increasingly digital world.

Who Does the Law Apply To?

The Louisiana Data Privacy Act applies to businesses that operate in Louisiana and meet at least one of the following criteria:

• Annual gross revenues exceeding $25 million
• Processing the personal data of 75,000 or more Louisiana consumers, households, or devices
• Deriving 50% or more of annual revenues from the sale of personal data

The law includes exemptions for state agencies, political subdivisions, financial institutions already governed by federal privacy laws like GLBA, nonprofit organizations, institutions of higher education, and electric public utilities.

Your Rights Under the Louisiana Data Privacy Act

Once the law takes effect, Louisiana consumers will have several important rights regarding their personal data:

Right to Access

You can request that a business confirm whether it is processing your personal data and provide you with a copy of that data.

Right to Correct

If a business has inaccurate personal data about you, you can request that it be corrected.

Right to Delete

You can request that a business delete your personal data, subject to certain exceptions.

Right to Data Portability

You can request a portable copy of your personal data in a commonly used format so you can transfer it to another service.

Right to Opt Out

You can opt out of the processing of your personal data for:

• Targeted advertising — Ads based on your personal data and browsing activity
• Sale of personal data — Transferring your data to third parties for monetary consideration
• Profiling — Automated decision-making that produces legal or similarly significant effects

Protection of Sensitive Data

The law prohibits businesses from processing sensitive personal data without your prior consent. Sensitive data includes information such as racial or ethnic origin, religious beliefs, health data, biometric data, and precise geolocation.

What Businesses Must Do

Businesses covered by the law will be required to:

• Publish a clear and accessible privacy notice explaining what data they collect, why they collect it, who they share it with, and how consumers can exercise their rights
• Respond to consumer data requests within 45 days
• Conduct data protection impact assessments for high-risk processing activities
• Implement reasonable data security practices
• Honor opt-out requests and provide clear mechanisms for consumers to exercise their rights

Louisiana's Existing Privacy Protections

While waiting for the comprehensive privacy law to take effect, Louisiana already has some data protection rules in place:

Data Breach Notification Law

Louisiana's Database Security Breach Notification Law (La. R.S. 51:3071 et seq.) requires businesses to notify Louisiana residents when their personal information has been compromised in a data breach. Notifications must be made as quickly as possible, and the law covers information such as Social Security numbers, driver's license numbers, and financial account information.

Reasonable Security Requirement

Entities that conduct business in Louisiana must implement and maintain "reasonable security procedures and practices" appropriate to the nature of the information they hold, to protect personal data from unauthorized access, destruction, use, modification, or disclosure.

How to Protect Your Privacy in Louisiana Today

You don't have to wait for the Louisiana Data Privacy Act to take effect to start protecting your personal information. Here are steps you can take right now:

• Exercise your federal rights: Under the Fair Credit Reporting Act, you can dispute inaccurate information with credit bureaus and request free annual credit reports
• Opt out of data brokers: Many data broker sites allow you to submit removal requests, even without a state law requiring it
• Freeze your credit: Place a free security freeze with Equifax, Experian, and TransUnion to prevent identity theft
• Monitor your digital footprint: Regularly search your name online to see what information is publicly available about you
• Limit data sharing: Review privacy settings on social media and be cautious about sharing personal information online

Let PrivacyOn Protect Your Privacy

While Louisiana's privacy law will give residents important new rights, the burden of exercising those rights falls on you. You'll need to identify every company that has your data, submit individual requests, and follow up to ensure compliance. It's a time-consuming process.

PrivacyOn simplifies this by automatically removing your personal data from 100+ data broker sites, providing 24/7 dark web monitoring, and continuously scanning for new exposures. With family plans starting at $8.33/month that cover up to 5 people, PrivacyOn is the most practical way to take control of your personal information — whether you're in Louisiana or anywhere else in the country.