House Bill No. [insert bill number] proposes the "Louisiana Consumer Privacy Act," which aims to enhance consumer data protection in Louisiana by establishing a comprehensive framework for the handling of personal data. This legislation introduces key definitions, consumer rights, and the responsibilities of data controllers and processors. It grants consumers the right to request information about their personal data and mandates timely responses from entities. The bill also includes provisions for deidentified data, enforcement mechanisms, civil fines, and the creation of a consumer privacy restricted account. Additionally, it amends R.S. 44:4.1(B)(35) to incorporate the new section R.S. 51:1395, aligning public records laws with the new consumer privacy regulations.

The bill sets specific criteria for applicability, targeting businesses with annual revenues of $25 million or more that handle the personal data of at least 100,000 consumers or derive over 50% of their revenue from data sales. It outlines consumer rights, including access to data, correction of inaccuracies, and opting out of targeted advertising. The legislation emphasizes data security, requiring controllers to implement protective measures and prohibiting discrimination against consumers exercising their rights. It also establishes the attorney general's exclusive enforcement authority and mandates data protection assessments for qualifying entities. A "Consumer Privacy Account" will be funded by civil enforcement actions to support investigative costs and consumer education, with the law set to take effect on December 31, 2024.

Statutes affected:
HB947 Original: 44:1(B)(35)