Senate Bill No. SLS 26RS-431 introduces the Louisiana Data Privacy Act, which aims to enhance consumer data privacy by imposing limitations on the use of personal data by businesses. The bill grants consumers rights regarding their personal information, including the ability to opt out of providing data on social media platforms. It applies to businesses with annual gross revenues exceeding $25 million or those handling the personal information of 75,000 or more consumers. The Act defines key terms related to data privacy and specifies that it does not apply to state agencies, political subdivisions, or financial institutions governed by federal laws.
The legislation outlines consumer rights, allowing individuals to request access, correction, deletion, and opt-out options for their data, with controllers required to respond within specified timeframes. It also mandates clear privacy notices from data controllers and prohibits the processing of sensitive data without consent. Enforcement mechanisms are established, allowing the attorney general to oversee compliance and address violations as unfair and deceptive trade practices. Notably, the Act excludes a private right of action for consumers and requires a 30-day notice period before the attorney general can initiate investigations into alleged violations. The provisions of the Act will take effect on January 1, 2027.