Bill > SB386

This bill, the Louisiana Data Privacy Act, establishes new rights for consumers regarding their personal data collected by businesses operating in Louisiana that meet certain revenue or data processing thresholds. It grants consumers the right to access, correct, and delete their personal data, and importantly, to opt out of the sale of their personal data, targeted advertising, and profiling that leads to significant legal or similar effects. The bill defines key terms like "personal data" (information linked to an identifiable individual), "sensitive data" (which includes health information, biometric data, and precise geolocation), and "targeted advertising" (ads selected based on a consumer's online activity over time). Businesses must provide clear privacy notices, implement reasonable data security practices, and conduct data protection assessments for certain high-risk processing activities. The Attorney General is tasked with enforcing the act, with a provision for a 30-day notice and cure period for alleged violations before legal action can be taken, and violations are treated as unfair trade practices. The law is set to take effect on January 1, 2027.

Business and Industry

https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB386&sbi=y