United States

Louisiana

Primary Law LDPA
Effective January 1, 2027
Enforcement Louisiana Attorney General
Private right of action No
Last Updated October 11, 2026
STATE LAW DOSSIER US-LA-20261011

Louisiana Data Privacy Act

Louisiana’s LDPA takes effect January 1, 2027 and brings the state into the modern consumer-privacy era: biometric data is sensitive data requiring opt-in consent, residents get deletion and access rights, and controllers face data-minimization duties. Its seven-month cure period gives businesses one warning shot and then ends. For a state with no prior biometric statute, it is a substantial jump.

Key Provisions

  • Biometric data classified as sensitive data requiring opt-in consent
  • Right to access, correct, and delete personal data held by controllers
  • Right to opt out of targeted advertising, sale, and profiling
  • Data minimization: collection limited to what is adequate and relevant
  • Seven-month cure period after effectiveness, then direct AG enforcement

Penalties & Enforcement Record

AG enforcement with civil penalties per violation once the cure period lapses in mid-2027; injunctive relief available from day one.

What this means for your face

From January 2027, Louisianans gain a statutory deletion right. We file opt-out requests for Louisiana residents through each engine’s own opt-out process.

Read our full breakdown of the LDPA → Get Protected