Law note · Louisiana
Louisiana Data Privacy Act (Act No. 502), Attorney General enforcement
The Louisiana Attorney General has exclusive authority to enforce the LDPA. A violation constitutes an unfair and deceptive trade practice under the Unfair Trade Practices and Consumer Protection Law (UTPCPL), R.S. 51:1401 et seq., but the Act expressly excludes the UTPCPL's own private-action provisions, R.S. 51:1409 and 1409.1, foreclosing a private right of action under the LDPA.
From January 1 to July 31, 2027, before bringing an action the Attorney General must give a person 30 days' written notice identifying the specific provisions violated, and may not initiate an investigation if the person cures the violation and confirms the cure in writing within that period.
What it asks of an app
- Expect an LDPA violation to be enforced exclusively by the Louisiana Attorney General; the Act forecloses a private right of action by name.
- Between January 1 and July 31, 2027, use the 30-day Attorney General notice-and-cure period to correct a violation and confirm the cure in writing before an investigation can proceed.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Louisiana Act No. 502 (2026 Regular Session) text, as signed, Louisiana Legislature