Louisiana Enacts Comprehensive Consumer Privacy Law to Protect Personal Data
Louisiana has enacted the Louisiana Data Privacy Act (LDPA), a comprehensive consumer privacy law, with the Governor's signature on Senate Bill 386. This law aligns with similar frameworks adopted by over twenty states, including Texas, Virginia, and Colorado. The LDPA introduces a controller/processor framework, granting consumers rights over their personal data and authorizing enforcement by the state attorney general. The law applies to businesses operating in Louisiana that meet specific thresholds, such as annual gross revenues over $25 million or handling personal information of 75,000 or more consumers. The LDPA protects personal data linked to individuals, excluding deidentified data and publicly available information. Sensitive data, such as racial or ethnic origin, religious beliefs, health conditions, and biometric data, is also protected. The law emphasizes data minimization and requires consumer consent for processing sensitive data.