Law note · Louisiana
Database Security Breach Notification Law, definitions
Louisiana's pre-existing Database Security Breach Notification Law (La. R.S. 51:3071 to 51:3077), first enacted 2005 (effective January 1, 2006) and last substantively amended 2018, is independent of the LDPA and already in force.
Personal information is an individual's name combined with a Social Security number, driver's license or state ID number, financial account or card number with an access code, passport number, or biometric data used to uniquely authenticate identity when accessing a system or account (a narrower, authentication-scoped biometric definition than the LDPA's, with no recording-derived exclusion or clawback of its own), and excludes publicly available government-record information.
What it asks of an app
- Treat a biometric identifier used to authenticate access to a system or account as covered personal information under this statute; its biometric definition is narrower than, and should not be conflated with, the LDPA's own biometric data definition.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, processes_biometrics
Primary source: official Louisiana Revised Statutes text, Louisiana State Legislature