House Bill No. [insert bill number] proposes the "Louisiana Consumer Privacy Act," which aims to strengthen consumer data protection in Louisiana by establishing a comprehensive framework for data handling by businesses. The bill defines key terms, outlines consumer rights, and sets forth the responsibilities of data processors and controllers. It grants consumers the right to request information about their personal data, mandates responses within 45 days, and prohibits discrimination against consumers exercising their rights. The legislation applies to businesses with annual revenues of at least $25 million that either process the personal data of at least 100,000 consumers or derive over 50% of their revenue from selling personal data.

The bill also amends existing law by updating R.S. 44:4.1(B)(35) to include the new section R.S. 51:1395, emphasizing consumer consent and the conditions for processing personal data, particularly sensitive data. It requires controllers to implement reasonable data security practices and conduct data protection assessments for high-risk processing activities. Additionally, the bill establishes a Consumer Privacy Account funded by civil enforcement actions, grants the attorney general exclusive enforcement authority, and mandates a report on the Act's effectiveness by July 1, 2026. The law is set to take effect on December 31, 2024.

Statutes affected:
HB947 Original: 44:1(B)(35)