Bill > SB386

This bill establishes the Louisiana Data Privacy Act, creating new rights for consumers regarding their personal data and imposing duties on businesses that collect and process this information. Key provisions include defining terms like "personal data" (any information linked to an identifiable individual), "sensitive data" (which includes health information, genetic data, and data from children), and "sale of personal data" (sharing data for monetary or valuable consideration). The Act grants consumers the right to access, correct, and delete their personal data, as well as the right to opt out of targeted advertising, the sale of their data, and profiling that leads to significant legal or similar effects. Businesses covered by the Act must implement reasonable data security practices, provide clear privacy notices, and conduct data protection assessments for certain high-risk processing activities. The Attorney General is empowered to enforce the Act, with penalties for violations, and consumers are granted a private right of action to sue for damages. The Act also includes exemptions for certain entities like state agencies, financial institutions, and healthcare providers, and specifies that it does not apply to purely personal or household activities.

Business and Industry

https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB386&sbi=y