Law note · Louisiana
Louisiana Data Privacy Act (Act No. 502), consumer rights
The LDPA gives a Louisiana consumer the right to confirm and access their personal data, correct inaccuracies, delete data, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and profiling producing a legal or similarly significant effect.
A controller must respond without undue delay and no later than 45 days after receipt, with one additional 45-day extension available if the controller notifies the consumer of the extension and its reason within the initial period. An appeal of a denial must be answered within 60 days, and a denial must include an online mechanism to reach the Attorney General. Any contract provision waiving or limiting a consumer's rights under this section is void and unenforceable as against public policy.
What it asks of an app
- Give a Louisiana consumer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy, once the LDPA takes effect January 1, 2027.
- Offer a Louisiana consumer an opt-out of targeted advertising, the sale of personal data, and profiling that produces a legal or similarly significant effect.
- Respond to a consumer rights request without undue delay and no later than 45 days after receipt, with one 45-day extension available, and respond to an appeal of a refusal within 60 days.
- Do not include a contract term waiving or limiting a Louisiana consumer's LDPA rights; such a term is void and unenforceable.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Louisiana Act No. 502 (2026 Regular Session) text, as signed, Louisiana Legislature