Cybersecurity Policy Report, Louisiana Data Privacy Legislation Sent to Governor, (May 26, 2026)
The Louisiana Data Privacy Act, which would establish a comprehensive framework for consumer data privacy rights and obligations for certain businesses operating in the state, has been sent to Gov. Jeff Landry (R.) for his signature.
SB 386 would grant consumers several rights regarding their personal data, including the right to confirm and access their data, correct inaccuracies, delete personal data, obtain a portable copy of their data, and opt out of targeted advertising, the sale of personal data, or profiling that produces significant effects.
The provisions of the bill would apply to entities doing business in the state that have annual gross revenues exceeding $25 million and process the personal data of 75,000 or more consumers, households, or devices or derive 50% or more of annual revenues from the sale of personal data.
Exemptions would be provided for state agencies, political subdivisions, financial institutions subject to federal privacy laws, nonprofits, institutions of higher education, electric utilities, and certain categories of data such as protected health information.
The bill would provide for enforcement by the state attorney general. From Jan.1, 2027, to July 31, 2027, the attorney general would be required to provide a 30-day written notice and opportunity to cure alleged violations before initiating investigations, under the amended bill. The bill has an effective date of Jan. 1, 2027.
The bill (S.B. 386, Reg Sess.) was sponsored by Sen. Patrick Connick (R.).
News: StateLegislation DataPrivacy