Louisiana. Comprehensive data protection. Act
LDPALouisiana Data Privacy Act
Enacted – not yet in force
§1Summary
- Synopsis
Comprehensive law enforced by the AG through the state unfair trade practices act, with CCPA-like applicability thresholds.
- Key themes
- Unique features
Revenue-only threshold ($25m) like California, alongside 75,000-consumer and 50%-revenue tests; short transitional cure period.
- SaaS relevance
Any SaaS with over $25m revenue operating in Louisiana is caught, regardless of Louisiana user numbers.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- See La. R.S. 51:3071 et seq. (separate statute)
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Up to $5,000 per violation (LUTPA)
§3Dates
- Key dates
- Adopted
- In force
- 30-day pre-investigation cure period 2027-01-01 to 2027-07-31.
§4Text and authority
- Text
- Authoritative text legis.la.gov
- Authority
- Louisiana Attorney General
§5Where it applies
- Domestic law of
- Louisiana
§6Sources and verification
- Verification
High confidence.
Bill/Act number not confirmed; text_url is the legislature document cited by WilmerHale.